# kubelet

kubeletSynopsisThe kubelet is the primary "node agent" that runs on each node. It can register the node with the apiserver using one of: the hostname; a flag to override the hostname; or specific logic for a cloud provider.The kubelet works in terms of a PodSpec. A PodSpec is a YAML or JSON object that describes a pod. The kubelet takes a set of PodSpecs that are provided through various mechanisms (primarily through the apiserver) and ensures that the containers described in those PodSpecs are running and healthy. The kubelet doesn't manage containers which were not created by Kubernetes.Other than from an PodSpec from the apiserver, there are two ways that a container manifest can be provided to the Kubelet.File: Path passed as a flag on the command line. Files under this path will be monitored periodically for updates. The monitoring period is 20s by default and is configurable via a flag.HTTP endpoint: HTTP endpoint passed as a parameter on the command line. This endpoint is checked every 20 seconds (also configurable with a flag).kubelet [flags] Options--address string Default: 0.0.0.0The IP address for the Kubelet to serve on (set to '0.0.0.0' or '::' for listening on all interfaces and IP address families) (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)--allowed-unsafe-sysctls stringsComma-separated whitelist of unsafe sysctls or unsafe sysctl patterns (ending in *). Use these at your own risk. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)--anonymous-auth Default: trueEnables anonymous requests to the Kubelet server. Requests that are not rejected by another authentication method are treated as anonymous requests. Anonymous requests have a username of system:anonymous, and a group name of system:unauthenticated. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)--authentication-token-webhookUse the TokenReview API to determine authentication for bearer tokens. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)--authentication-token-webhook-cache-ttl duration Default: 2m0sThe duration to cache responses from the webhook token authenticator. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)--authorization-mode string Default: "AlwaysAllow"Authorization mode for Kubelet server. Valid options are AlwaysAllow or Webhook. Webhook mode uses the SubjectAccessReview API to determine authorization. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)--authorization-webhook-cache-authorized-ttl duration Default: 5m0sThe duration to cache 'authorized' responses from the webhook authorizer. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)--authorization-webhook-cache-unauthorized-ttl duration Default: 30sThe duration to cache 'unauthorized' responses from the webhook authorizer. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)--bootstrap-kubeconfig stringPath to a kubeconfig file that will be used to get client certificate for kubelet. If the file specified by --kubeconfig does not exist, the bootstrap kubeconfig is used to request a client certificate from the API server. On success, a kubeconfig file referencing the generated client certificate and key is written to the path specified by --kubeconfig. The client certificate and key file will be stored in the directory pointed by --cert-dir.--cert-dir string Default: "/var/lib/kubelet/pki"The directory where the TLS certs are located. If --tls-cert-file and --tls-private-key-file are provided, this flag will be ignored.--cgroup-driver string Default: "cgroupfs"Driver that the kubelet uses to manipulate cgroups on the host. Possible values: 'cgroupfs', 'systemd' (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)--cgroup-root stringOptional root cgroup to use for pods. This is handled by the container runtime on a best effort basis. Default: '', which means use the container runtime default. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)--cgroups-per-qos Default: trueEnable creation of QoS cgroup hierarchy, if true top level QoS and pod cgroups are created. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)--client-ca-file stringIf set, any request presenting a client certificate signed by one of the authorities in the client-ca-file is authenticated with an identity corresponding to the CommonName of the client certificate. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)--cloud-provider stringThe provider for cloud services. Set to empty string for running with no cloud provider. Set to 'external' for running with an external cloud provider.--cluster-dns stringsComma-separated list of DNS server IP address. This value is used for containers DNS server in case of Pods with "dnsPolicy=ClusterFirst". Note: all DNS servers appearing in the list MUST serve the same set of records otherwise name resolution within the cluster may not work correctly. There is no guarantee as to which DNS server may be contacted for name resolution. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)--cluster-domain stringDomain for this cluster. If set, kubelet will configure all containers to search this domain in addition to the host's search domains (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)--config stringThe Kubelet will load its initial configuration from this file. The path may be absolute or relative; relative paths start at the Kubelet's current working directory. Omit this flag to use the built-in default configuration values. Command-line flags override configuration from this file.--config-dir stringPath to a directory to specify drop-ins, allows the user to optionally specify additional configs to overwrite what is provided by default and in the KubeletConfigFile flag. [default='']--container-log-max-files int32 Default: 5<Warning: Beta feature> Set the maximum number of container log files that can be present for a container. The number must be >= 2. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)--container-log-max-size string Default: "10Mi"<Warning: Beta feature> Set the maximum size (e.g. 10Mi) of container log file before it is rotated. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)--container-runtime-endpoint string Default: "unix:///run/containerd/containerd.sock"The endpoint of container runtime service. Unix Domain Sockets are supported on Linux, while npipe and tcp endpoints are supported on Windows. Examples:'unix:///path/to/runtime.sock', 'npipe:////./pipe/runtime' (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)--contention-profilingEnable block profiling, if profiling is enabled (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)--cpu-cfs-quota Default: trueEnable CPU CFS quota enforcement for containers that specify CPU limits (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)--cpu-cfs-quota-period duration Default: 100msSets CPU CFS quota period value, cpu.cfs_period_us, defaults to Linux Kernel default (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)--cpu-manager-policy string Default: "none"CPU Manager policy to use. Possible values: 'none', 'static'. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)--cpu-manager-policy-options <comma-separated 'key=value' pairs>A set of key=value CPU Manager policy options to use, to fine tune their behaviour. If not supplied, keep the default behaviour. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)--cpu-manager-reconcile-period duration Default: 10s<Warning: Alpha feature> CPU Manager reconciliation period. Examples: '10s', or '1m'. If not supplied, defaults to 'NodeStatusUpdateFrequency' (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)--enable-controller-attach-detach Default: trueEnables the Attach/Detach controller to manage attachment/detachment of volumes scheduled to this node, and disables kubelet from executing any attach/detach operations (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)--enable-debugging-handlers Default: trueEnables server endpoints for log collection and local running of containers and commands (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)--enable-server Default: trueEnable the Kubelet's server (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)--enforce-node-allocatable strings Default: "pods"A comma separated list of levels of node allocatable enforcement to be enforced by kubelet. Acceptable options are 'none', 'pods', 'system-reserved', 'system-reserved-compressible', 'kube-reserved' and 'kube-reserved-compressible'. If any of the latter four options are specified, '--system-reserved-cgroup' and '--kube-reserved-cgroup' must also be set, respectively. If 'none' is specified, no additional options should be set. See https://kubernetes.io/docs/tasks/administer-cluster/reserve-compute-resources/ for more details. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)--event-burst int32 Default: 100Maximum size of a bursty event records, temporarily allows event records to burst to this number, while still not exceeding event-qps. The number must be >= 0. If 0 will use DefaultBurst: 10. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)--event-qps int32 Default: 50QPS to limit event creations. The number must be >= 0. If 0 will use DefaultQPS: 5. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)--eviction-hard <comma-separated 'key=value' pairs>A set of eviction thresholds (e.g. memory.available<1Gi) that if met would trigger a pod eviction. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)--eviction-max-pod-grace-period int32Maximum allowed grace period (in seconds) to use when terminating pods in response to a soft eviction threshold being met. If negative, defer to pod specified value. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)--eviction-minimum-reclaim <comma-separated 'key=value' pairs>A set of minimum reclaims (e.g. imagefs.available=2Gi) that describes the minimum amount of resource the kubelet will reclaim when performing a pod eviction if that resource is under pressure. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)--eviction-pressure-transition-period duration Default: 5m0sDuration for which the kubelet has to wait before transitioning out of an eviction pressure condition. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)--eviction-soft <comma-separated 'key=value' pairs>A set of eviction thresholds (e.g. memory.available<1.5Gi) that if met over a corresponding grace period would trigger a pod eviction. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)--eviction-soft-grace-period <comma-separated 'key=value' pairs>A set of eviction grace periods (e.g. memory.available=1m30s) that correspond to how long a soft eviction threshold must hold before triggering a pod eviction. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)--exit-on-lock-contentionWhether kubelet should exit upon lock-file contention.--experimental-allocatable-ignore-evictionWhen set to 'true', Hard Eviction Thresholds will be ignored while calculating Node Allocatable. See https://kubernetes.io/docs/tasks/administer-cluster/reserve-compute-resources/ for more details. [default=false] (DEPRECATED: will be removed in 1.25 or later.)--experimental-mounter-path string[Experimental] Path of mounter binary. Leave empty to use the default mount. (DEPRECATED: will be removed in 1.25 or later. in favor of using CSI.)--fail-cgroupv1Prevent the kubelet from starting on the host using cgroup v1.--fail-swap-on Default: trueMakes the Kubelet fail to start if swap is enabled on the node. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)--feature-gates <comma-separated 'key=True|False' pairs>A set of key=value pairs that describe feature gates for alpha/experimental features. Options are:APIResponseCompression=true|false (BETA - default=true)APIServerIdentity=true|false (BETA - default=true)APIServingWithRoutine=true|false (ALPHA - default=false)AllAlpha=true|false (ALPHA - default=false)AllBeta=true|false (BETA - default=false)AllowParsingUserUIDFromCertAuth=true|false (BETA - default=true)AllowUnsafeMalformedObjectDeletion=true|false (ALPHA - default=false)CBORServingAndStorage=true|false (ALPHA - default=false)CPUManagerPolicyAlphaOptions=true|false (ALPHA - default=false)CPUManagerPolicyBetaOptions=true|false (BETA - default=true)CSIVolumeHealth=true|false (ALPHA - default=false)ClearingNominatedNodeNameAfterBinding=true|false (ALPHA - default=false)ClientsAllowCBOR=true|false (ALPHA - default=false)ClientsPreferCBOR=true|false (ALPHA - default=false)CloudControllerManagerWebhook=true|false (ALPHA - default=false)ClusterTrustBundle=true|false (BETA - default=false)ClusterTrustBundleProjection=true|false (BETA - default=false)ComponentFlagz=true|false (ALPHA - default=false)ComponentStatusz=true|false (ALPHA - default=false)ConcurrentWatchObjectDecode=true|false (BETA - default=false)ContainerCheckpoint=true|false (BETA - default=true)ContainerRestartRules=true|false (ALPHA - default=false)ContainerStopSignals=true|false (ALPHA - default=false)ContextualLogging=true|false (BETA - default=true)CoordinatedLeaderElection=true|false (BETA - default=false)CrossNamespaceVolumeDataSource=true|false (ALPHA - default=false)CustomCPUCFSQuotaPeriod=true|false (ALPHA - default=false)DRAAdminAccess=true|false (BETA - default=true)DRAConsumableCapacity=true|false (ALPHA - default=false)DRADeviceBindingConditions=true|false (ALPHA - default=false)DRADeviceTaints=true|false (ALPHA - default=false)DRAExtendedResource=true|false (ALPHA - default=false)DRAPartitionableDevices=true|false (ALPHA - default=false)DRAPrioritizedList=true|false (BETA - default=true)DRAResourceClaimDeviceStatus=true|false (BETA - default=true)DRASchedulerFilterTimeout=true|false (BETA - default=true)DeclarativeValidation=true|false (BETA - default=true)DeclarativeValidationTakeover=true|false (BETA - default=false)DeploymentReplicaSetTerminatingReplicas=true|false (ALPHA - default=false)DetectCacheInconsistency=true|false (BETA - default=true)DisableCPUQuotaWithExclusiveCPUs=true|false (BETA - default=true)EnvFiles=true|false (ALPHA - default=false)EventedPLEG=true|false (ALPHA - default=false)ExternalServiceAccountTokenSigner=true|false (BETA - default=true)GracefulNodeShutdown=true|false (BETA - default=true)GracefulNodeShutdownBasedOnPodPriority=true|false (BETA - default=true)HPAConfigurableTolerance=true|false (ALPHA - default=false)HPAScaleToZero=true|false (ALPHA - default=false)HostnameOverride=true|false (ALPHA - default=false)ImageMaximumGCAge=true|false (BETA - default=true)ImageVolume=true|false (BETA - default=false)InOrderInformers=true|false (BETA - default=true)InPlacePodVerticalScaling=true|false (BETA - default=true)InPlacePodVerticalScalingExclusiveCPUs=true|false (ALPHA - default=false)InPlacePodVerticalScalingExclusiveMemory=true|false (ALPHA - default=false)InTreePluginPortworxUnregister=true|false (ALPHA - default=false)InformerResourceVersion=true|false (ALPHA - default=false)JobManagedBy=true|false (BETA - default=true)KubeletCrashLoopBackOffMax=true|false (ALPHA - default=false)KubeletEnsureSecretPulledImages=true|false (ALPHA - default=false)KubeletFineGrainedAuthz=true|false (BETA - default=true)KubeletInUserNamespace=true|false (ALPHA - default=false)KubeletPSI=true|false (BETA - default=true)KubeletPodResourcesDynamicResources=true|false (BETA - default=true)KubeletPodResourcesGet=true|false (BETA - default=true)KubeletSeparateDiskGC=true|false (BETA - default=true)KubeletServiceAccountTokenForCredentialProviders=true|false (BETA - default=true)ListFromCacheSnapshot=true|false (BETA - default=true)LocalStorageCapacityIsolationFSQuotaMonitoring=true|false (BETA - default=false)LoggingAlphaOptions=true|false (ALPHA - default=false)LoggingBetaOptions=true|false (BETA - default=true)MatchLabelKeysInPodTopologySpread=true|false (BETA - default=true)MatchLabelKeysInPodTopologySpreadSelectorMerge=true|false (BETA - default=true)MaxUnavailableStatefulSet=true|false (ALPHA - default=false)MemoryQoS=true|false (ALPHA - default=false)MutableCSINodeAllocatableCount=true|false (BETA - default=false)MutatingAdmissionPolicy=true|false (BETA - default=false)NodeLogQuery=true|false (BETA - default=false)NominatedNodeNameForExpectation=true|false (ALPHA - default=false)OpenAPIEnums=true|false (BETA - default=true)PodAndContainerStatsFromCRI=true|false (ALPHA - default=false)PodCertificateRequest=true|false (ALPHA - default=false)PodDeletionCost=true|false (BETA - default=true)PodLevelResources=true|false (BETA - default=true)PodLogsQuerySplitStreams=true|false (ALPHA - default=false)PodObservedGenerationTracking=true|false (BETA - default=true)PodReadyToStartContainersCondition=true|false (BETA - default=true)PodTopologyLabelsAdmission=true|false (ALPHA - default=false)PortForwardWebsockets=true|false (BETA - default=true)PreferSameTrafficDistribution=true|false (BETA - default=true)PreventStaticPodAPIReferences=true|false (BETA - default=true)ProcMountType=true|false (BETA - default=true)QOSReserved=true|false (ALPHA - default=false)ReduceDefaultCrashLoopBackOffDecay=true|false (ALPHA - default=false)RelaxedServiceNameValidation=true|false (ALPHA - default=false)ReloadKubeletServerCertificateFile=true|false (BETA - default=true)RemoteRequestHeaderUID=true|false (BETA - default=true)ResourceHealthStatus=true|false (ALPHA - default=false)RotateKubeletServerCertificate=true|false (BETA - default=true)RuntimeClassInImageCriApi=true|false (ALPHA - default=false)SELinuxChangePolicy=true|false (BETA - default=true)SELinuxMount=true|false (BETA - default=false)SELinuxMountReadWriteOncePod=true|false (BETA - default=true)SchedulerAsyncAPICalls=true|false (BETA - default=true)SchedulerAsyncPreemption=true|false (BETA - default=true)SchedulerPopFromBackoffQ=true|false (BETA - default=true)ServiceAccountNodeAudienceRestriction=true|false (BETA - default=true)SizeBasedListCostEstimate=true|false (BETA - default=true)StorageCapacityScoring=true|false (ALPHA - default=false)StorageVersionAPI=true|false (ALPHA - default=false)StorageVersionHash=true|false (BETA - default=true)StorageVersionMigrator=true|false (ALPHA - default=false)StrictIPCIDRValidation=true|false (ALPHA - default=false)StructuredAuthenticationConfigurationEgressSelector=true|false (BETA - default=true)SupplementalGroupsPolicy=true|false (BETA - default=true)SystemdWatchdog=true|false (BETA - default=true)TokenRequestServiceAccountUIDValidation=true|false (BETA - default=true)TopologyManagerPolicyAlphaOptions=true|false (ALPHA - default=false)TopologyManagerPolicyBetaOptions=true|false (BETA - default=true)TranslateStreamCloseWebsocketRequests=true|false (BETA - default=true)UnauthenticatedHTTP2DOSMitigation=true|false (BETA - default=true)UnknownVersionInteroperabilityProxy=true|false (ALPHA - default=false)UserNamespacesPodSecurityStandards=true|false (ALPHA - default=false)UserNamespacesSupport=true|false (BETA - default=true)WatchCacheInitializationPostStartHook=true|false (BETA - default=false)WatchList=true|false (BETA - default=true)WatchListClient=true|false (BETA - default=false)WindowsCPUAndMemoryAffinity=true|false (ALPHA - default=false)WindowsGracefulNodeShutdown=true|false (BETA - default=true) (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)--file-check-frequency duration Default: 20sDuration between checking config files for new data (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)--hairpin-mode string Default: "promiscuous-bridge"How should the kubelet setup hairpin NAT. This allows endpoints of a Service to loadbalance back to themselves if they should try to access their own Service. Valid values are "promiscuous-bridge", "hairpin-veth" and "none". (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)--healthz-bind-address string Default: 127.0.0.1The IP address for the healthz server to serve on (set to '0.0.0.0' or '::' for listening on all interfaces and IP address families) (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)--healthz-port int32 Default: 10248The port of the localhost healthz endpoint (set to 0 to disable) (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)-h, --helphelp for kubelet--hostname-override stringIf non-empty, will use this string as identification instead of the actual hostname.--http-check-frequency duration Default: 20sDuration between checking http for new data (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)--image-credential-provider-bin-dir stringThe path to the directory where credential provider plugin binaries are located.--image-credential-provider-config stringPath to a credential provider plugin config file (JSON/YAML/YML) or a directory of such files (merged in lexicographical order; non-recursive search).--image-gc-high-threshold int32 Default: 85The percent of disk usage after which image garbage collection is always run. Values must be within the range [0, 100], To disable image garbage collection, set to 100. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)--image-gc-low-threshold int32 Default: 80The percent of disk usage before which image garbage collection is never run. Lowest disk usage to garbage collect to. Values must be within the range [0, 100] and must be less than that of --image-gc-high-threshold. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)--image-service-endpoint stringThe endpoint of container image service. If not specified, it will be the same with --container-runtime-endpoint by default. Unix Domain Socket are supported on Linux, while npipe and tcp endpoints are supported on Windows. Examples:'unix:///path/to/runtime.sock', 'npipe:////./pipe/runtime' (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)--kernel-memcg-notificationIf enabled, the kubelet will integrate with the kernel memcg notification to determine if memory eviction thresholds are crossed rather than polling. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)--kube-api-burst int32 Default: 100Burst to use while talking with kubernetes apiserver. The number must be >= 0. If 0 will use DefaultBurst: 100. Doesn't cover events and node heartbeat apis which rate limiting is controlled by a different set of flags (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)--kube-api-content-type string Default: "application/vnd.kubernetes.protobuf"Content type of requests sent to apiserver. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)--kube-api-qps int32 Default: 50QPS to use while talking with kubernetes apiserver. The number must be >= 0. If 0 will use DefaultQPS: 50. Doesn't cover events and node heartbeat apis which rate limiting is controlled by a different set of flags (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)--kube-reserved <comma-separated 'key=value' pairs>A set of ResourceName=ResourceQuantity (e.g. cpu=200m,memory=500Mi,ephemeral-storage=1Gi,pid=1000) pairs that describe resources reserved for kubernetes system components. Currently only cpu, memory, pid and local ephemeral storage for root file system are supported. See https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/ for more detail. [default=none] (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)--kube-reserved-cgroup stringAbsolute name of the top level cgroup that is used to manage kubernetes components for which compute resources were reserved via '--kube-reserved' flag. Ex. '/kube-reserved'. [default=''] (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)--kubeconfig stringPath to a kubeconfig file, specifying how to connect to the API server. Providing --kubeconfig enables API server mode, omitting --kubeconfig enables standalone mode.--kubelet-cgroups stringOptional absolute name of cgroups to create and run the Kubelet in. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)--local-storage-capacity-isolation Default: trueIf true, local ephemeral storage isolation is enabled. Otherwise, local storage isolation feature will be disabled (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)--lock-file string<Warning: Alpha feature> The path to file for kubelet to use as a lock file.--log-flush-frequency duration Default: 5sMaximum number of seconds between log flushes--log-text-info-buffer-size quantity[Alpha] In text format with split output streams, the info messages can be buffered for a while to increase performance. The default value of zero bytes disables buffering. The size can be specified as number of bytes (512), multiples of 1000 (1K), multiples of 1024 (2Ki), or powers of those (3M, 4G, 5Mi, 6Gi). Enable the LoggingAlphaOptions feature gate to use this. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)--log-text-split-stream[Alpha] In text format, write error messages to stderr and info messages to stdout. The default is to write a single stream to stdout. Enable the LoggingAlphaOptions feature gate to use this. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)--logging-format string Default: "text"Sets the log format. Permitted formats: "text". (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)--make-iptables-util-chains Default: trueIf true, kubelet will ensure iptables utility rules are present on host. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)--manifest-url stringURL for accessing additional Pod specifications to run (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)--manifest-url-header colonSeparatedMultimapStringStringComma-separated list of HTTP headers to use when accessing the url provided to --manifest-url. Multiple headers with the same name will be added in the same order provided. This flag can be repeatedly invoked. For example: --manifest-url-header 'a:hello,b:again,c:world' --manifest-url-header 'b:beautiful' (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)--max-open-files int Default: 1000000Number of files that can be opened by Kubelet process. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)--max-pods int32 Default: 110Number of Pods that can run on this Kubelet. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)--maximum-dead-containers int32 Default: -1Maximum number of old instances of containers to retain globally. Each container takes up some disk space. To disable, set to a negative number. (DEPRECATED: Use --eviction-hard or --eviction-soft instead. Will be removed in a future version.)--maximum-dead-containers-per-container int32 Default: 1Maximum number of old instances to retain per container. Each container takes up some disk space. (DEPRECATED: Use --eviction-hard or --eviction-soft instead. Will be removed in a future version.)--memory-manager-policy string Default: "None"Memory Manager policy to use. Possible values: 'None', 'Static'. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)--minimum-container-ttl-duration durationMinimum age for a finished container before it is garbage collected. Examples: '300ms', '10s' or '2h45m' (DEPRECATED: Use --eviction-hard or --eviction-soft instead. Will be removed in a future version.)--minimum-image-ttl-duration duration Default: 2m0sMinimum age for an unused image before it is garbage collected. Examples: '300ms', '10s' or '2h45m'. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)--node-ip stringIP address (or comma-separated dual-stack IP addresses) of the node. If unset, kubelet will use the node's default IPv4 address, if any, or its default IPv6 address if it has no IPv4 addresses. You can pass '::' to make it prefer the default IPv6 address rather than the default IPv4 address. If cloud-provider is set to external, this flag will help to bootstrap the node with the corresponding IP.--node-labels <comma-separated 'key=value' pairs>Labels to add when registering the node in the cluster. Labels must be key=value pairs separated by ','. Labels in the 'kubernetes.io' namespace must begin with an allowed prefix (kubelet.kubernetes.io, node.kubernetes.io) or be in the specifically allowed set (beta.kubernetes.io/arch, beta.kubernetes.io/instance-type, beta.kubernetes.io/os, failure-domain.beta.kubernetes.io/region, failure-domain.beta.kubernetes.io/zone, kubernetes.io/arch, kubernetes.io/hostname, kubernetes.io/os, node.kubernetes.io/instance-type, topology.kubernetes.io/region, topology.kubernetes.io/zone)--node-status-max-images int32 Default: 50The maximum number of images to report in Node.Status.Images. If -1 is specified, no cap will be applied. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)--node-status-update-frequency duration Default: 10sSpecifies how often kubelet posts node status to master. Note: be cautious when changing the constant, it must work with nodeMonitorGracePeriod in nodecontroller. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)--oom-score-adj int32 Default: -999The oom-score-adj value for kubelet process. Values must be within the range [-1000, 1000] (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)--pod-cidr stringThe CIDR to use for pod IP addresses, only used in standalone mode. In cluster mode, this is obtained from the master. For IPv6, the maximum number of IP's allocated is 65536 (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)--pod-infra-container-image stringSpecified image will not be pruned by the image garbage collector. CRI implementations have their own configuration to set this image. (DEPRECATED: will be removed in 1.35. Image garbage collector will get sandbox image information from CRI.)--pod-manifest-path stringPath to the directory containing static pod files to run, or the path to a single static pod file. Files starting with dots will be ignored. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)--pod-max-pids int Default: -1Set the maximum number of processes per pod. If -1, the kubelet defaults to the node allocatable pid capacity. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)--pods-per-core int32Number of Pods per core that can run on this Kubelet. The total number of Pods on this Kubelet cannot exceed max-pods, so max-pods will be used if this calculation results in a larger number of Pods allowed on the Kubelet. A value of 0 disables this limit. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)--port int32 Default: 10250The port for the Kubelet to serve on. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)--protect-kernel-defaultsDefault kubelet behaviour for kernel tuning. If set, kubelet errors if any of kernel tunables is different than kubelet defaults. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)--provider-id stringUnique identifier for identifying the node in a machine database, i.e cloudprovider--qos-reserved <comma-separated 'key=value' pairs><Warning: Alpha feature> A set of ResourceName=Percentage (e.g. memory=50%) pairs that describe how pod resource requests are reserved at the QoS level. Currently only memory is supported. Requires the QOSReserved feature gate to be enabled. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)--read-only-port int32 Default: 10255The read-only port for the Kubelet to serve on with no authentication/authorization (set to 0 to disable) (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)--register-node Default: trueRegister the node with the apiserver. If --kubeconfig is not provided, this flag is irrelevant, as the Kubelet won't have an apiserver to register with. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)--register-with-taints []v1.TaintRegister the node with the given list of taints (comma separated "<key>=<value>:<effect>"). No-op if register-node is false. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)--registry-burst int32 Default: 10Maximum size of a bursty pulls, temporarily allows pulls to burst to this number, while still not exceeding registry-qps. Only used if --registry-qps > 0 (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)--registry-qps int32 Default: 5If > 0, limit registry pull QPS to this value. If 0, unlimited. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)--reserved-cpus stringA comma-separated list of CPUs or CPU ranges that are reserved for system and kubernetes usage. This specific list will supersede cpu counts in --system-reserved and --kube-reserved. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)--reserved-memory reserved-memoryA comma separated list of memory reservations for NUMA nodes. (e.g. --reserved-memory 0:memory=1Gi,hugepages-1M=2Gi --reserved-memory 1:memory=2Gi). The total sum for each memory type should be equal to the sum of kube-reserved, system-reserved and eviction-threshold. See https://kubernetes.io/docs/tasks/administer-cluster/memory-manager/#reserved-memory-flag for more details. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)--resolv-conf string Default: "/etc/resolv.conf"Resolver configuration file used as the basis for the container DNS resolution configuration. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)--root-dir string Default: "/var/lib/kubelet"Directory path for managing kubelet files (volume mounts,etc).--rotate-certificatesAuto rotate the kubelet client certificates by requesting new certificates from the kube-apiserver when the certificate expiration approaches. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)--rotate-server-certificatesAuto-request and rotate the kubelet serving certificates by requesting new certificates from the kube-apiserver when the certificate expiration approaches. Requires the RotateKubeletServerCertificate feature gate to be enabled, and approval of the submitted CertificateSigningRequest objects. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)--runonceIf true, exit after spawning pods from static pod files or remote urls. Exclusive with --enable-server (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)--runtime-cgroups stringOptional absolute name of cgroups to create and run the runtime in.--runtime-request-timeout duration Default: 2m0sTimeout of all runtime requests except long running request - pull, logs, exec and attach. When timeout exceeded, kubelet will cancel the request, throw out an error and retry later. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)--seccomp-default RuntimeDefaultEnable the use of RuntimeDefault as the default seccomp profile for all workloads.--serialize-image-pulls Default: truePull images one at a time. We recommend not changing the default value on nodes that run docker daemon with version < 1.9 or an Aufs storage backend. Issue #10959 has more details. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)--streaming-connection-idle-timeout duration Default: 4h0m0sMaximum time a streaming connection can be idle before the connection is automatically closed. 0 indicates no timeout. Example: '5m'. Note: All connections to the kubelet server have a maximum duration of 4 hours. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)--sync-frequency duration Default: 1m0sMax period between synchronizing running containers and config (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)--system-cgroups stringOptional absolute name of cgroups in which to place all non-kernel processes that are not already inside a cgroup under '/'. Empty for no container. Rolling back the flag requires a reboot. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)--system-reserved <comma-separated 'key=value' pairs>A set of ResourceName=ResourceQuantity (e.g. cpu=200m,memory=500Mi,ephemeral-storage=1Gi,pid=1000) pairs that describe resources reserved for non-kubernetes components. Currently only cpu, memory, pid and local ephemeral storage for root file system are supported. See https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/ for more detail. [default=none] (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)--system-reserved-cgroup stringAbsolute name of the top level cgroup that is used to manage non-kubernetes components for which compute resources were reserved via '--system-reserved' flag. Ex. '/system-reserved'. [default=''] (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)--tls-cert-file stringFile containing x509 Certificate used for serving HTTPS (with intermediate certs, if any, concatenated after server cert). If --tls-cert-file and --tls-private-key-file are not provided, a self-signed certificate and key are generated for the public address and saved to the directory passed to --cert-dir. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)--tls-cipher-suites stringsComma-separated list of cipher suites for the server. If omitted, the default Go cipher suites will be used.Preferred values: TLS_AES_128_GCM_SHA256, TLS_AES_256_GCM_SHA384, TLS_CHACHA20_POLY1305_SHA256, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305, TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305, TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256.Insecure values: TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_RC4_128_SHA, TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_RSA_WITH_RC4_128_SHA, TLS_RSA_WITH_3DES_EDE_CBC_SHA, TLS_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_AES_128_CBC_SHA256, TLS_RSA_WITH_AES_128_GCM_SHA256, TLS_RSA_WITH_AES_256_CBC_SHA, TLS_RSA_WITH_AES_256_GCM_SHA384, TLS_RSA_WITH_RC4_128_SHA. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)--tls-min-version stringMinimum TLS version supported. Possible values: VersionTLS10, VersionTLS11, VersionTLS12, VersionTLS13 (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)--tls-private-key-file stringFile containing x509 private key matching --tls-cert-file. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)--topology-manager-policy string Default: "none"Topology Manager policy to use. Possible values: 'none', 'best-effort', 'restricted', 'single-numa-node'. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)--topology-manager-policy-options <comma-separated 'key=value' pairs>A set of key=value Topology Manager policy options to use, to fine tune their behaviour. If not supplied, keep the default behaviour. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)--topology-manager-scope string Default: "container"Scope to which topology hints applied. Topology Manager collects hints from Hint Providers and applies them to defined scope to ensure the pod admission. Possible values: 'container', 'pod'. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)-v, --v intnumber for the log level verbosity--version version[=true]--version, --version=raw prints version information and quits; --version=vX.Y.Z... sets the reported version--vmodule pattern=N,...comma-separated list of pattern=N settings for file-filtered logging (only works for text log format)--volume-plugin-dir string Default: "/usr/libexec/kubernetes/kubelet-plugins/volume/exec/"The full path of the directory in which to search for additional third party volume plugins (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)--volume-stats-agg-period duration Default: 1m0sSpecifies interval for kubelet to calculate and cache the volume disk usage for all pods and volumes. To disable volume calculations, set to a negative number. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)This page is automatically generated.If you plan to report an issue with this page, mention that the page is auto-generated in your issue description. The fix may need to happen elsewhere in the Kubernetes project.


# API Overview

Kubernetes API Reference Docs Overview API Groups Workloads APIs Container v1 core CronJob v1 batch Write Operations Create Patch Replace Delete Delete Collection Read Operations Read List List All Namespaces Watch Watch List Watch List All Namespaces Status Operations Patch Status Read Status Replace Status DaemonSet v1 apps Write Operations Create Patch Replace Delete Delete Collection Read Operations Read List List All Namespaces Watch Watch List Watch List All Namespaces Status Operations Patch Status Read Status Replace Status Deployment v1 apps Write Operations Create Patch Replace Delete Delete Collection Read Operations Read List List All Namespaces Watch Watch List Watch List All Namespaces Status Operations Patch Status Read Status Replace Status Misc Operations Read Scale Replace Scale Patch Scale Job v1 batch Write Operations Create Patch Replace Delete Delete Collection Read Operations Read List List All Namespaces Watch Watch List Watch List All Namespaces Status Operations Patch Status Read Status Replace Status Pod v1 core Write Operations Create Create Eviction Patch Replace Delete Delete Collection Read Operations Read List List All Namespaces Watch Watch List Watch List All Namespaces Status Operations Patch Status Read Status Replace Status Resize Operations Read Resize Patch Resize Replace Resize EphemeralContainers Operations Patch EphemeralContainers Read EphemeralContainers Replace EphemeralContainers Proxy Operations Create Connect Portforward Create Connect Proxy Create Connect Proxy Path Delete Connect Proxy Delete Connect Proxy Path Get Connect Portforward Get Connect Proxy Get Connect Proxy Path Head Connect Proxy Head Connect Proxy Path Replace Connect Proxy Replace Connect Proxy Path Misc Operations Read Log Get Connect Exec Create Connect Exec Get Connect Attach Create Connect Attach ReplicaSet v1 apps Write Operations Create Patch Replace Delete Delete Collection Read Operations Read List List All Namespaces Watch Watch List Watch List All Namespaces Status Operations Patch Status Read Status Replace Status Misc Operations Read Scale Replace Scale Patch Scale ReplicationController v1 core Write Operations Create Patch Replace Delete Delete Collection Read Operations Read List List All Namespaces Watch Watch List Watch List All Namespaces Status Operations Patch Status Read Status Replace Status Misc Operations Read Scale Replace Scale Patch Scale StatefulSet v1 apps Write Operations Create Patch Replace Delete Delete Collection Read Operations Read List List All Namespaces Watch Watch List Watch List All Namespaces Status Operations Patch Status Read Status Replace Status Misc Operations Read Scale Replace Scale Patch Scale Service APIs Endpoints v1 core Write Operations Create Patch Replace Delete Delete Collection Read Operations Read List List All Namespaces Watch Watch List Watch List All Namespaces EndpointSlice v1 discovery.k8s.io Write Operations Create Patch Replace Delete Delete Collection Read Operations Read List List All Namespaces Watch Watch List Watch List All Namespaces Ingress v1 networking.k8s.io Write Operations Create Patch Replace Delete Delete Collection Read Operations Read List List All Namespaces Watch Watch List Watch List All Namespaces Status Operations Patch Status Read Status Replace Status IngressClass v1 networking.k8s.io Write Operations Create Patch Replace Delete Delete Collection Read Operations Read List Watch Watch List Service v1 core Write Operations Create Patch Replace Delete Delete Collection Read Operations Read List List All Namespaces Watch Watch List Watch List All Namespaces Status Operations Patch Status Read Status Replace Status Proxy Operations Create Connect Proxy Create Connect Proxy Path Delete Connect Proxy Delete Connect Proxy Path Get Connect Proxy Get Connect Proxy Path Head Connect Proxy Head Connect Proxy Path Replace Connect Proxy Replace Connect Proxy Path Config and Storage APIs ConfigMap v1 core Write Operations Create Patch Replace Delete Delete Collection Read Operations Read List List All Namespaces Watch Watch List Watch List All Namespaces CSIDriver v1 storage.k8s.io Write Operations Create Patch Replace Delete Delete Collection Read Operations Read List Watch Watch List CSINode v1 storage.k8s.io Write Operations Create Patch Replace Delete Delete Collection Read Operations Read List Watch Watch List CSIStorageCapacity v1 storage.k8s.io Write Operations Create Patch Replace Delete Delete Collection Read Operations Read List List All Namespaces Watch Watch List Watch List All Namespaces Secret v1 core Write Operations Create Patch Replace Delete Delete Collection Read Operations Read List List All Namespaces Watch Watch List Watch List All Namespaces PersistentVolumeClaim v1 core Write Operations Create Patch Replace Delete Delete Collection Read Operations Read List List All Namespaces Watch Watch List Watch List All Namespaces Status Operations Patch Status Read Status Replace Status StorageClass v1 storage.k8s.io Write Operations Create Patch Replace Delete Delete Collection Read Operations Read List Watch Watch List StorageVersionMigration v1alpha1 storagemigration.k8s.io Write Operations Create Patch Replace Delete Delete Collection Read Operations Read List Watch Watch List Status Operations Patch Status Read Status Replace Status Volume v1 core VolumeAttachment v1 storage.k8s.io Write Operations Create Patch Replace Delete Delete Collection Read Operations Read List Watch Watch List Status Operations Patch Status Read Status Replace Status VolumeAttributesClass v1 storage.k8s.io Write Operations Create Patch Replace Delete Delete Collection Read Operations Read List Watch Watch List Metadata APIs ClusterTrustBundle v1beta1 certificates.k8s.io Write Operations Create Patch Replace Delete Delete Collection Read Operations Read List Watch Watch List ControllerRevision v1 apps Write Operations Create Patch Replace Delete Delete Collection Read Operations Read List List All Namespaces Watch Watch List Watch List All Namespaces CustomResourceDefinition v1 apiextensions.k8s.io Write Operations Create Patch Replace Delete Delete Collection Read Operations Read List Watch Watch List Status Operations Patch Status Read Status Replace Status DeviceClass v1 resource.k8s.io Write Operations Create Patch Replace Delete Delete Collection Read Operations Read List Watch Watch List DeviceTaintRule v1alpha3 resource.k8s.io Write Operations Create Patch Replace Delete Delete Collection Read Operations Read List Watch Watch List Event v1 events.k8s.io Write Operations Create Patch Replace Delete Delete Collection Read Operations Read List List All Namespaces Watch Watch List Watch List All Namespaces LimitRange v1 core Write Operations Create Patch Replace Delete Delete Collection Read Operations Read List List All Namespaces Watch Watch List Watch List All Namespaces HorizontalPodAutoscaler v2 autoscaling Write Operations Create Patch Replace Delete Delete Collection Read Operations Read List List All Namespaces Watch Watch List Watch List All Namespaces Status Operations Patch Status Read Status Replace Status MutatingWebhookConfiguration v1 admissionregistration.k8s.io Write Operations Create Patch Replace Delete Delete Collection Read Operations Read List Watch Watch List PodTemplate v1 core Write Operations Create Patch Replace Delete Delete Collection Read Operations Read List List All Namespaces Watch Watch List Watch List All Namespaces PodDisruptionBudget v1 policy Write Operations Create Patch Replace Delete Delete Collection Read Operations Read List List All Namespaces Watch Watch List Watch List All Namespaces Status Operations Patch Status Read Status Replace Status PriorityClass v1 scheduling.k8s.io Write Operations Create Patch Replace Delete Delete Collection Read Operations Read List Watch Watch List ResourceClaim v1 resource.k8s.io Write Operations Create Patch Replace Delete Delete Collection Read Operations Read List List All Namespaces Watch Watch List Watch List All Namespaces Status Operations Patch Status Read Status Replace Status ResourceClaimTemplate v1 resource.k8s.io Write Operations Create Patch Replace Delete Delete Collection Read Operations Read List List All Namespaces Watch Watch List Watch List All Namespaces ResourceSlice v1 resource.k8s.io Write Operations Create Patch Replace Delete Delete Collection Read Operations Read List Watch Watch List ValidatingAdmissionPolicy v1 admissionregistration.k8s.io Write Operations Create Patch Replace Delete Delete Collection Read Operations Read List Watch Watch List Status Operations Patch Status Read Status Replace Status ValidatingAdmissionPolicyBinding v1 admissionregistration.k8s.io Write Operations Create Patch Replace Delete Delete Collection Read Operations Read List Watch Watch List ValidatingWebhookConfiguration v1 admissionregistration.k8s.io Write Operations Create Patch Replace Delete Delete Collection Read Operations Read List Watch Watch List Cluster APIs APIService v1 apiregistration.k8s.io Write Operations Create Patch Replace Delete Delete Collection Read Operations Read List Watch Watch List Status Operations Patch Status Read Status Replace Status Binding v1 core Write Operations Create CertificateSigningRequest v1 certificates.k8s.io Write Operations Create Patch Replace Delete Delete Collection Read Operations Read List Watch Watch List Status Operations Patch Status Read Status Replace Status ClusterRole v1 rbac.authorization.k8s.io Write Operations Create Patch Replace Delete Delete Collection Read Operations Read List Watch Watch List ClusterRoleBinding v1 rbac.authorization.k8s.io Write Operations Create Patch Replace Delete Delete Collection Read Operations Read List Watch Watch List ComponentStatus v1 core Read Operations Read List FlowSchema v1 flowcontrol.apiserver.k8s.io Write Operations Create Patch Replace Delete Delete Collection Read Operations Read List Watch Watch List Status Operations Patch Status Read Status Replace Status IPAddress v1 networking.k8s.io Write Operations Create Patch Replace Delete Delete Collection Read Operations Read List Watch Watch List Lease v1 coordination.k8s.io Write Operations Create Patch Replace Delete Delete Collection Read Operations Read List List All Namespaces Watch Watch List Watch List All Namespaces LeaseCandidate v1beta1 coordination.k8s.io Write Operations Create Patch Replace Delete Delete Collection Read Operations Read List List All Namespaces Watch Watch List Watch List All Namespaces LocalSubjectAccessReview v1 authorization.k8s.io Write Operations Create Namespace v1 core Write Operations Create Patch Replace Delete Read Operations Read List Watch Watch List Status Operations Patch Status Read Status Replace Status Node v1 core Write Operations Create Patch Replace Delete Delete Collection Read Operations Read List Watch Watch List Status Operations Patch Status Read Status Replace Status Proxy Operations Create Connect Proxy Create Connect Proxy Path Delete Connect Proxy Delete Connect Proxy Path Get Connect Proxy Get Connect Proxy Path Head Connect Proxy Head Connect Proxy Path Replace Connect Proxy Replace Connect Proxy Path PersistentVolume v1 core Write Operations Create Patch Replace Delete Delete Collection Read Operations Read List Watch Watch List Status Operations Patch Status Read Status Replace Status PodCertificateRequest v1alpha1 certificates.k8s.io Write Operations Create Patch Replace Delete Delete Collection Read Operations Read List List All Namespaces Watch Watch List Watch List All Namespaces Status Operations Patch Status Read Status Replace Status PriorityLevelConfiguration v1 flowcontrol.apiserver.k8s.io Write Operations Create Patch Replace Delete Delete Collection Read Operations Read List Watch Watch List Status Operations Patch Status Read Status Replace Status ResourceQuota v1 core Write Operations Create Patch Replace Delete Delete Collection Read Operations Read List List All Namespaces Watch Watch List Watch List All Namespaces Status Operations Patch Status Read Status Replace Status Role v1 rbac.authorization.k8s.io Write Operations Create Patch Replace Delete Delete Collection Read Operations Read List List All Namespaces Watch Watch List Watch List All Namespaces RoleBinding v1 rbac.authorization.k8s.io Write Operations Create Patch Replace Delete Delete Collection Read Operations Read List List All Namespaces Watch Watch List Watch List All Namespaces RuntimeClass v1 node.k8s.io Write Operations Create Patch Replace Delete Delete Collection Read Operations Read List Watch Watch List SelfSubjectAccessReview v1 authorization.k8s.io Write Operations Create SelfSubjectReview v1 authentication.k8s.io Write Operations Create SelfSubjectRulesReview v1 authorization.k8s.io Write Operations Create ServiceAccount v1 core Write Operations Create Patch Replace Delete Delete Collection Read Operations Read List List All Namespaces Watch Watch List Watch List All Namespaces ServiceCIDR v1 networking.k8s.io Write Operations Create Patch Replace Delete Delete Collection Read Operations Read List Watch Watch List Status Operations Patch Status Read Status Replace Status StorageVersion v1alpha1 internal.apiserver.k8s.io Write Operations Create Patch Replace Delete Delete Collection Read Operations Read List Watch Watch List Status Operations Patch Status Read Status Replace Status StorageVersionMigration v1alpha1 storagemigration.k8s.io Write Operations Create Patch Replace Delete Delete Collection Read Operations Read List Watch Watch List Status Operations Patch Status Read Status Replace Status SubjectAccessReview v1 authorization.k8s.io Write Operations Create TokenRequest v1 authentication.k8s.io TokenReview v1 authentication.k8s.io Write Operations Create NetworkPolicy v1 networking.k8s.io Write Operations Create Patch Replace Delete Delete Collection Read Operations Read List List All Namespaces Watch Watch List Watch List All Namespaces MutatingAdmissionPolicy v1beta1 admissionregistration.k8s.io Write Operations Create Patch Replace Delete Delete Collection Read Operations Read List Watch Watch List MutatingAdmissionPolicyBinding v1beta1 admissionregistration.k8s.io Write Operations Create Patch Replace Delete Delete Collection Read Operations Read List Watch Watch List DEFINITIONS APIGroup v1 meta APIResource v1 meta APIServiceCondition v1 apiregistration.k8s.io APIVersions v1 meta AWSElasticBlockStoreVolumeSource v1 core Affinity v1 core AggregationRule v1 rbac.authorization.k8s.io AllocatedDeviceStatus v1 resource.k8s.io AllocationResult v1 resource.k8s.io AppArmorProfile v1 core ApplyConfiguration v1beta1 admissionregistration.k8s.io AttachedVolume v1 core AuditAnnotation v1 admissionregistration.k8s.io AzureDiskVolumeSource v1 core AzureFilePersistentVolumeSource v1 core AzureFileVolumeSource v1 core BasicDevice v1beta1 resource.k8s.io BoundObjectReference v1 authentication.k8s.io CELDeviceSelector v1 resource.k8s.io CSINodeDriver v1 storage.k8s.io CSIPersistentVolumeSource v1 core CSIVolumeSource v1 core Capabilities v1 core CapacityRequestPolicy v1 resource.k8s.io CapacityRequestPolicyRange v1 resource.k8s.io CapacityRequirements v1 resource.k8s.io CephFSPersistentVolumeSource v1 core CephFSVolumeSource v1 core CertificateSigningRequestCondition v1 certificates.k8s.io CinderPersistentVolumeSource v1 core CinderVolumeSource v1 core ClientIPConfig v1 core ClusterTrustBundleProjection v1 core ComponentCondition v1 core Condition v1 meta ConfigMapEnvSource v1 core ConfigMapKeySelector v1 core ConfigMapNodeConfigSource v1 core ConfigMapProjection v1 core ConfigMapVolumeSource v1 core ContainerExtendedResourceRequest v1 core ContainerImage v1 core ContainerPort v1 core ContainerResizePolicy v1 core ContainerResourceMetricSource v2 autoscaling ContainerResourceMetricStatus v2 autoscaling ContainerRestartRule v1 core ContainerRestartRuleOnExitCodes v1 core ContainerState v1 core ContainerStateRunning v1 core ContainerStateTerminated v1 core ContainerStateWaiting v1 core ContainerUser v1 core Counter v1 resource.k8s.io CounterSet v1 resource.k8s.io CrossVersionObjectReference v2 autoscaling CustomResourceColumnDefinition v1 apiextensions.k8s.io CustomResourceConversion v1 apiextensions.k8s.io CustomResourceDefinitionCondition v1 apiextensions.k8s.io CustomResourceDefinitionNames v1 apiextensions.k8s.io CustomResourceDefinitionVersion v1 apiextensions.k8s.io CustomResourceSubresourceScale v1 apiextensions.k8s.io CustomResourceSubresourceStatus v1 apiextensions.k8s.io CustomResourceSubresources v1 apiextensions.k8s.io CustomResourceValidation v1 apiextensions.k8s.io DaemonEndpoint v1 core DaemonSetCondition v1 apps DaemonSetUpdateStrategy v1 apps DeleteOptions v1 meta DeploymentCondition v1 apps Device v1 resource.k8s.io DeviceAllocationConfiguration v1 resource.k8s.io DeviceAllocationResult v1 resource.k8s.io DeviceAttribute v1 resource.k8s.io DeviceCapacity v1 resource.k8s.io DeviceClaim v1 resource.k8s.io DeviceClaimConfiguration v1 resource.k8s.io DeviceClassConfiguration v1 resource.k8s.io DeviceConstraint v1 resource.k8s.io DeviceCounterConsumption v1 resource.k8s.io DeviceRequest v1 resource.k8s.io DeviceRequestAllocationResult v1 resource.k8s.io DeviceSelector v1 resource.k8s.io DeviceSubRequest v1 resource.k8s.io DeviceTaint v1 resource.k8s.io DeviceTaintSelector v1alpha3 resource.k8s.io DeviceToleration v1 resource.k8s.io DownwardAPIProjection v1 core DownwardAPIVolumeFile v1 core DownwardAPIVolumeSource v1 core EmptyDirVolumeSource v1 core Endpoint v1 discovery.k8s.io EndpointAddress v1 core EndpointConditions v1 discovery.k8s.io EndpointHints v1 discovery.k8s.io EndpointPort v1 core EndpointSubset v1 core EnvFromSource v1 core EnvVar v1 core EnvVarSource v1 core EphemeralContainer v1 core EphemeralVolumeSource v1 core EventSeries v1 events.k8s.io EventSource v1 core Eviction v1 policy ExactDeviceRequest v1 resource.k8s.io ExecAction v1 core ExemptPriorityLevelConfiguration v1 flowcontrol.apiserver.k8s.io ExpressionWarning v1 admissionregistration.k8s.io ExternalDocumentation v1 apiextensions.k8s.io ExternalMetricSource v2 autoscaling ExternalMetricStatus v2 autoscaling FCVolumeSource v1 core FieldSelectorAttributes v1 authorization.k8s.io FieldSelectorRequirement v1 meta FieldsV1 v1 meta FileKeySelector v1 core FlexPersistentVolumeSource v1 core FlexVolumeSource v1 core FlockerVolumeSource v1 core FlowDistinguisherMethod v1 flowcontrol.apiserver.k8s.io FlowSchemaCondition v1 flowcontrol.apiserver.k8s.io ForNode v1 discovery.k8s.io ForZone v1 discovery.k8s.io GCEPersistentDiskVolumeSource v1 core GRPCAction v1 core GitRepoVolumeSource v1 core GlusterfsPersistentVolumeSource v1 core GlusterfsVolumeSource v1 core GroupSubject v1 flowcontrol.apiserver.k8s.io GroupVersionForDiscovery v1 meta GroupVersionResource v1alpha1 storagemigration.k8s.io HPAScalingPolicy v2 autoscaling HPAScalingRules v2 autoscaling HTTPGetAction v1 core HTTPHeader v1 core HTTPIngressPath v1 networking.k8s.io HTTPIngressRuleValue v1 networking.k8s.io HorizontalPodAutoscalerBehavior v2 autoscaling HorizontalPodAutoscalerCondition v2 autoscaling HostAlias v1 core HostIP v1 core HostPathVolumeSource v1 core IPBlock v1 networking.k8s.io ISCSIPersistentVolumeSource v1 core ISCSIVolumeSource v1 core ImageVolumeSource v1 core IngressBackend v1 networking.k8s.io IngressClassParametersReference v1 networking.k8s.io IngressLoadBalancerIngress v1 networking.k8s.io IngressLoadBalancerStatus v1 networking.k8s.io IngressPortStatus v1 networking.k8s.io IngressRule v1 networking.k8s.io IngressServiceBackend v1 networking.k8s.io IngressTLS v1 networking.k8s.io JSON v1 apiextensions.k8s.io JSONPatch v1beta1 admissionregistration.k8s.io JSONSchemaProps v1 apiextensions.k8s.io JSONSchemaPropsOrArray v1 apiextensions.k8s.io JSONSchemaPropsOrBool v1 apiextensions.k8s.io JobCondition v1 batch JobTemplateSpec v1 batch KeyToPath v1 core LabelSelector v1 meta LabelSelectorAttributes v1 authorization.k8s.io LabelSelectorRequirement v1 meta Lifecycle v1 core LifecycleHandler v1 core LimitRangeItem v1 core LimitResponse v1 flowcontrol.apiserver.k8s.io LimitedPriorityLevelConfiguration v1 flowcontrol.apiserver.k8s.io LinuxContainerUser v1 core ListMeta v1 meta LoadBalancerIngress v1 core LoadBalancerStatus v1 core LocalObjectReference v1 core LocalVolumeSource v1 core ManagedFieldsEntry v1 meta MatchCondition v1 admissionregistration.k8s.io MatchResources v1 admissionregistration.k8s.io MetricIdentifier v2 autoscaling MetricSpec v2 autoscaling MetricStatus v2 autoscaling MetricTarget v2 autoscaling MetricValueStatus v2 autoscaling MicroTime v1 meta MigrationCondition v1alpha1 storagemigration.k8s.io ModifyVolumeStatus v1 core MutatingWebhook v1 admissionregistration.k8s.io Mutation v1beta1 admissionregistration.k8s.io NFSVolumeSource v1 core NamedRuleWithOperations v1 admissionregistration.k8s.io NamespaceCondition v1 core NetworkDeviceData v1 resource.k8s.io NetworkPolicyEgressRule v1 networking.k8s.io NetworkPolicyIngressRule v1 networking.k8s.io NetworkPolicyPeer v1 networking.k8s.io NetworkPolicyPort v1 networking.k8s.io NodeAddress v1 core NodeAffinity v1 core NodeCondition v1 core NodeConfigSource v1 core NodeConfigStatus v1 core NodeDaemonEndpoints v1 core NodeFeatures v1 core NodeRuntimeHandler v1 core NodeRuntimeHandlerFeatures v1 core NodeSelector v1 core NodeSelectorRequirement v1 core NodeSelectorTerm v1 core NodeSwapStatus v1 core NodeSystemInfo v1 core NonResourceAttributes v1 authorization.k8s.io NonResourcePolicyRule v1 flowcontrol.apiserver.k8s.io NonResourceRule v1 authorization.k8s.io ObjectFieldSelector v1 core ObjectMeta v1 meta ObjectMetricSource v2 autoscaling ObjectMetricStatus v2 autoscaling ObjectReference v1 core OpaqueDeviceConfiguration v1 resource.k8s.io Overhead v1 node.k8s.io OwnerReference v1 meta ParamKind v1 admissionregistration.k8s.io ParamRef v1 admissionregistration.k8s.io ParentReference v1 networking.k8s.io Patch v1 meta PersistentVolumeClaimCondition v1 core PersistentVolumeClaimTemplate v1 core PersistentVolumeClaimVolumeSource v1 core PhotonPersistentDiskVolumeSource v1 core PodAffinity v1 core PodAffinityTerm v1 core PodAntiAffinity v1 core PodCertificateProjection v1 core PodCondition v1 core PodDNSConfig v1 core PodDNSConfigOption v1 core PodExtendedResourceClaimStatus v1 core PodFailurePolicy v1 batch PodFailurePolicyOnExitCodesRequirement v1 batch PodFailurePolicyOnPodConditionsPattern v1 batch PodFailurePolicyRule v1 batch PodIP v1 core PodOS v1 core PodReadinessGate v1 core PodResourceClaim v1 core PodSchedulingGate v1 core PodSecurityContext v1 core PodsMetricSource v2 autoscaling PodsMetricStatus v2 autoscaling PolicyRule v1 rbac.authorization.k8s.io PolicyRulesWithSubjects v1 flowcontrol.apiserver.k8s.io PortStatus v1 core PortworxVolumeSource v1 core Preconditions v1 meta PreferredSchedulingTerm v1 core PriorityLevelConfigurationCondition v1 flowcontrol.apiserver.k8s.io PriorityLevelConfigurationReference v1 flowcontrol.apiserver.k8s.io Probe v1 core ProjectedVolumeSource v1 core Quantity resource core QueuingConfiguration v1 flowcontrol.apiserver.k8s.io QuobyteVolumeSource v1 core RBDPersistentVolumeSource v1 core RBDVolumeSource v1 core ReplicaSetCondition v1 apps ReplicationControllerCondition v1 core ResourceAttributes v1 authorization.k8s.io ResourceClaim v1 core ResourceClaimConsumerReference v1 resource.k8s.io ResourceFieldSelector v1 core ResourceHealth v1 core ResourceMetricSource v2 autoscaling ResourceMetricStatus v2 autoscaling ResourcePolicyRule v1 flowcontrol.apiserver.k8s.io ResourcePool v1 resource.k8s.io ResourceRequirements v1 core ResourceRule v1 authorization.k8s.io ResourceStatus v1 core RoleRef v1 rbac.authorization.k8s.io RollingUpdateStatefulSetStrategy v1 apps RuleWithOperations v1 admissionregistration.k8s.io SELinuxOptions v1 core Scale v1 autoscaling ScaleIOPersistentVolumeSource v1 core ScaleIOVolumeSource v1 core Scheduling v1 node.k8s.io ScopeSelector v1 core ScopedResourceSelectorRequirement v1 core SeccompProfile v1 core SecretEnvSource v1 core SecretKeySelector v1 core SecretProjection v1 core SecretReference v1 core SecretVolumeSource v1 core SecurityContext v1 core SelectableField v1 apiextensions.k8s.io ServerAddressByClientCIDR v1 meta ServerStorageVersion v1alpha1 internal.apiserver.k8s.io ServiceAccountSubject v1 flowcontrol.apiserver.k8s.io ServiceAccountTokenProjection v1 core ServiceBackendPort v1 networking.k8s.io ServicePort v1 core ServiceReference v1 admissionregistration.k8s.io SessionAffinityConfig v1 core SleepAction v1 core StatefulSetCondition v1 apps StatefulSetOrdinals v1 apps StatefulSetPersistentVolumeClaimRetentionPolicy v1 apps StatefulSetUpdateStrategy v1 apps Status v1 meta StatusCause v1 meta StatusDetails v1 meta StorageOSPersistentVolumeSource v1 core StorageOSVolumeSource v1 core StorageVersionCondition v1alpha1 internal.apiserver.k8s.io Subject v1 flowcontrol.apiserver.k8s.io SubjectRulesReviewStatus v1 authorization.k8s.io SuccessPolicy v1 batch SuccessPolicyRule v1 batch Sysctl v1 core TCPSocketAction v1 core Taint v1 core Time v1 meta Toleration v1 core TopologySelectorLabelRequirement v1 core TopologySelectorTerm v1 core TopologySpreadConstraint v1 core TypeChecking v1 admissionregistration.k8s.io TypedLocalObjectReference v1 core TypedObjectReference v1 core UncountedTerminatedPods v1 batch UserInfo v1 authentication.k8s.io UserSubject v1 flowcontrol.apiserver.k8s.io ValidatingWebhook v1 admissionregistration.k8s.io Validation v1 admissionregistration.k8s.io ValidationRule v1 apiextensions.k8s.io Variable v1 admissionregistration.k8s.io VolumeAttachmentSource v1 storage.k8s.io VolumeDevice v1 core VolumeError v1 storage.k8s.io VolumeMount v1 core VolumeNodeAffinity v1 core VolumeNodeResources v1 storage.k8s.io VolumeProjection v1 core VolumeResourceRequirements v1 core VsphereVirtualDiskVolumeSource v1 core WatchEvent v1 meta WebhookClientConfig v1 admissionregistration.k8s.io WebhookConversion v1 apiextensions.k8s.io WeightedPodAffinityTerm v1 core WindowsSecurityContextOptions v1 core OLD API VERSIONS AllocatedDeviceStatus v1beta2 resource.k8s.io AllocatedDeviceStatus v1beta1 resource.k8s.io AllocationResult v1beta2 resource.k8s.io AllocationResult v1beta1 resource.k8s.io ApplyConfiguration v1alpha1 admissionregistration.k8s.io CELDeviceSelector v1beta2 resource.k8s.io CELDeviceSelector v1beta1 resource.k8s.io CELDeviceSelector v1alpha3 resource.k8s.io CapacityRequestPolicy v1beta2 resource.k8s.io CapacityRequestPolicy v1beta1 resource.k8s.io CapacityRequestPolicyRange v1beta2 resource.k8s.io CapacityRequestPolicyRange v1beta1 resource.k8s.io CapacityRequirements v1beta2 resource.k8s.io CapacityRequirements v1beta1 resource.k8s.io ClusterTrustBundle v1alpha1 certificates.k8s.io Write Operations Create Patch Replace Delete Delete Collection Read Operations Read List Watch Watch List Counter v1beta2 resource.k8s.io Counter v1beta1 resource.k8s.io CounterSet v1beta2 resource.k8s.io CounterSet v1beta1 resource.k8s.io CrossVersionObjectReference v1 autoscaling Device v1beta2 resource.k8s.io Device v1beta1 resource.k8s.io DeviceAllocationConfiguration v1beta2 resource.k8s.io DeviceAllocationConfiguration v1beta1 resource.k8s.io DeviceAllocationResult v1beta2 resource.k8s.io DeviceAllocationResult v1beta1 resource.k8s.io DeviceAttribute v1beta2 resource.k8s.io DeviceAttribute v1beta1 resource.k8s.io DeviceCapacity v1beta2 resource.k8s.io DeviceCapacity v1beta1 resource.k8s.io DeviceClaim v1beta2 resource.k8s.io DeviceClaim v1beta1 resource.k8s.io DeviceClaimConfiguration v1beta2 resource.k8s.io DeviceClaimConfiguration v1beta1 resource.k8s.io DeviceClass v1beta2 resource.k8s.io Write Operations Create Patch Replace Delete Delete Collection Read Operations Read List Watch Watch List DeviceClass v1beta1 resource.k8s.io Write Operations Create Patch Replace Delete Delete Collection Read Operations Read List Watch Watch List DeviceClassConfiguration v1beta2 resource.k8s.io DeviceClassConfiguration v1beta1 resource.k8s.io DeviceConstraint v1beta2 resource.k8s.io DeviceConstraint v1beta1 resource.k8s.io DeviceCounterConsumption v1beta2 resource.k8s.io DeviceCounterConsumption v1beta1 resource.k8s.io DeviceRequest v1beta2 resource.k8s.io DeviceRequest v1beta1 resource.k8s.io DeviceRequestAllocationResult v1beta2 resource.k8s.io DeviceRequestAllocationResult v1beta1 resource.k8s.io DeviceSelector v1beta2 resource.k8s.io DeviceSelector v1beta1 resource.k8s.io DeviceSelector v1alpha3 resource.k8s.io DeviceSubRequest v1beta2 resource.k8s.io DeviceSubRequest v1beta1 resource.k8s.io DeviceTaint v1beta2 resource.k8s.io DeviceTaint v1beta1 resource.k8s.io DeviceTaint v1alpha3 resource.k8s.io DeviceToleration v1beta2 resource.k8s.io DeviceToleration v1beta1 resource.k8s.io EndpointPort v1 discovery.k8s.io Event v1 core Write Operations Create Patch Replace Delete Delete Collection Read Operations Read List List All Namespaces Watch Watch List Watch List All Namespaces EventSeries v1 core ExactDeviceRequest v1beta2 resource.k8s.io HorizontalPodAutoscaler v1 autoscaling Write Operations Create Patch Replace Delete Delete Collection Read Operations Read List List All Namespaces Watch Watch List Watch List All Namespaces Status Operations Patch Status Read Status Replace Status IPAddress v1beta1 networking.k8s.io Write Operations Create Patch Replace Delete Delete Collection Read Operations Read List Watch Watch List JSONPatch v1alpha1 admissionregistration.k8s.io LeaseCandidate v1alpha2 coordination.k8s.io Write Operations Create Patch Replace Delete Delete Collection Read Operations Read List List All Namespaces Watch Watch List Watch List All Namespaces MatchCondition v1beta1 admissionregistration.k8s.io MatchCondition v1alpha1 admissionregistration.k8s.io MatchResources v1beta1 admissionregistration.k8s.io MatchResources v1alpha1 admissionregistration.k8s.io MutatingAdmissionPolicy v1alpha1 admissionregistration.k8s.io Write Operations Create Patch Replace Delete Delete Collection Read Operations Read List Watch Watch List MutatingAdmissionPolicyBinding v1alpha1 admissionregistration.k8s.io Write Operations Create Patch Replace Delete Delete Collection Read Operations Read List Watch Watch List Mutation v1alpha1 admissionregistration.k8s.io NamedRuleWithOperations v1beta1 admissionregistration.k8s.io NamedRuleWithOperations v1alpha1 admissionregistration.k8s.io NetworkDeviceData v1beta2 resource.k8s.io NetworkDeviceData v1beta1 resource.k8s.io OpaqueDeviceConfiguration v1beta2 resource.k8s.io OpaqueDeviceConfiguration v1beta1 resource.k8s.io ParamKind v1beta1 admissionregistration.k8s.io ParamKind v1alpha1 admissionregistration.k8s.io ParamRef v1beta1 admissionregistration.k8s.io ParamRef v1alpha1 admissionregistration.k8s.io ParentReference v1beta1 networking.k8s.io ResourceClaim v1 resource.k8s.io Write Operations Create Patch Replace Delete Delete Collection Read Operations Read List List All Namespaces Watch Watch List Watch List All Namespaces Status Operations Patch Status Read Status Replace Status ResourceClaim v1beta2 resource.k8s.io Write Operations Create Patch Replace Delete Delete Collection Read Operations Read List List All Namespaces Watch Watch List Watch List All Namespaces Status Operations Patch Status Read Status Replace Status ResourceClaim v1beta1 resource.k8s.io Write Operations Create Patch Replace Delete Delete Collection Read Operations Read List List All Namespaces Watch Watch List Watch List All Namespaces Status Operations Patch Status Read Status Replace Status ResourceClaimConsumerReference v1beta2 resource.k8s.io ResourceClaimConsumerReference v1beta1 resource.k8s.io ResourceClaimTemplate v1beta2 resource.k8s.io Write Operations Create Patch Replace Delete Delete Collection Read Operations Read List List All Namespaces Watch Watch List Watch List All Namespaces ResourceClaimTemplate v1beta1 resource.k8s.io Write Operations Create Patch Replace Delete Delete Collection Read Operations Read List List All Namespaces Watch Watch List Watch List All Namespaces ResourcePool v1beta2 resource.k8s.io ResourcePool v1beta1 resource.k8s.io ResourceSlice v1beta2 resource.k8s.io Write Operations Create Patch Replace Delete Delete Collection Read Operations Read List Watch Watch List ResourceSlice v1beta1 resource.k8s.io Write Operations Create Patch Replace Delete Delete Collection Read Operations Read List Watch Watch List ServiceCIDR v1beta1 networking.k8s.io Write Operations Create Patch Replace Delete Delete Collection Read Operations Read List Watch Watch List Status Operations Patch Status Read Status Replace Status ServiceReference v1 apiextensions.k8s.io ServiceReference v1 apiregistration.k8s.io Subject v1 rbac.authorization.k8s.io TokenRequest v1 storage.k8s.io Variable v1beta1 admissionregistration.k8s.io Variable v1alpha1 admissionregistration.k8s.io VolumeAttributesClass v1beta1 storage.k8s.io Write Operations Create Patch Replace Delete Delete Collection Read Operations Read List Watch Watch List VolumeAttributesClass v1alpha1 storage.k8s.io Write Operations Create Patch Replace Delete Delete Collection Read Operations Read List Watch Watch List WebhookClientConfig v1 apiextensions.k8s.io Copyright 2016-2025 The Kubernetes Authors. Generated at: 2025-08-30 21:35:23 (CST) API Version: v1.34.0 Switch / API Overview Welcome to the Kubernetes API. You can use the Kubernetes API to read and write Kubernetes resource objects via a Kubernetes API endpoint. Resource Categories This is a high-level overview of the basic types of resources provide by the Kubernetes API and their primary functions. Workloads are objects you use to manage and run your containers on the cluster. Discovery & LB resources are objects you use to "stitch" your workloads together into an externally accessible, load-balanced Service. Config & Storage resources are objects you use to inject initialization data into your applications, and to persist data that is external to your container. Cluster resources objects define how the cluster itself is configured; these are typically used only by cluster operators. Metadata resources are objects you use to configure the behavior of other resources within the cluster, such as HorizontalPodAutoscaler for scaling workloads. Resource Objects Resource objects typically have 3 components: Resource ObjectMeta: This is metadata about the resource, such as its name, type, api version, annotations, and labels. This contains fields that maybe updated both by the end user and the system (e.g. annotations). ResourceSpec: This is defined by the user and describes the desired state of system. Fill this in when creating or updating an object. ResourceStatus: This is filled in by the server and reports the current state of the system. In most cases, users don't need to change this. Resource Operations Most resources provide the following Operations: Create Create operations will create the resource in the storage backend. After a resource is create the system will apply the desired state. Update Updates come in 2 forms: Replace and Patch: Replace: Replacing a resource object will update the resource by replacing the existing spec with the provided one. For read-then-write operations this is safe because an optimistic lock failure will occur if the resource was modified between the read and write. Note: The ResourceStatus will be ignored by the system and will not be updated. To update the status, one must invoke the specific status update operation. Note: Replacing a resource object may not result immediately in changes being propagated to downstream objects. For instance replacing a ConfigMap or Secret resource will not result in all Pods seeing the changes unless the Pods are restarted out of band. Patch: Patch will apply a change to a specific field. How the change is merged is defined per field. Lists may either be replaced or merged. Merging lists will not preserve ordering. Patches will never cause optimistic locking failures, and the last write will win. Patches are recommended when the full state is not read before an update, or when failing on optimistic locking is undesirable. When patching complex types, arrays and maps, how the patch is applied is defined on a per-field basis and may either replace the field's current value, or merge the contents into the current value. Read Reads come in 3 forms: Get, List and Watch: Get: Get will retrieve a specific resource object by name. List: List will retrieve all resource objects of a specific type within a namespace, and the results can be restricted to resources matching a selector query. List All Namespaces: Like List but retrieves resources across all namespaces. Watch: Watch will stream results for an object(s) as it is updated. Similar to a callback, watch is used to respond to resource changes. Delete Delete will delete a resource. Depending on the specific resource, child objects may or may not be garbage collected by the server. See notes on specific resource objects for details. Additional Operations Resources may define additional operations specific to that resource type. Rollback: Rollback a PodTemplate to a previous version. Only available for some resource types. Read / Write Scale: Read or Update the number of replicas for the given resource. Only available for some resource types. Read / Write Status: Read or Update the Status for a resource object. The Status can only changed through these update operations. API Groups The API Groups and their versions are summarized in the following table. GroupVersions admissionregistration.k8s.iov1, v1beta1, v1alpha1 apiextensions.k8s.iov1 apiregistration.k8s.iov1 appsv1 authentication.k8s.iov1 authorization.k8s.iov1 autoscalingv2, v1 batchv1 certificates.k8s.iov1, v1beta1, v1alpha1 coordination.k8s.iov1, v1beta1, v1alpha2 corev1 discovery.k8s.iov1 events.k8s.iov1 flowcontrol.apiserver.k8s.iov1 internal.apiserver.k8s.iov1alpha1 networking.k8s.iov1, v1beta1 node.k8s.iov1 policyv1 rbac.authorization.k8s.iov1 resource.k8s.iov1, v1beta2, v1beta1, v1alpha3 scheduling.k8s.iov1 storage.k8s.iov1, v1beta1, v1alpha1 storagemigration.k8s.iov1alpha1 Workloads Workloads resources are responsible for managing and running your containers on the cluster. Containers are created by Controllers through Pods. Pods run Containers and provide environmental dependencies such as shared or persistent storage Volumes and Configuration or Secret data injected into the container. The most common Controllers are: Deployments for stateless persistent apps (e.g. HTTP servers). StatefulSets for stateful persistent apps (e.g. databases). Jobs for run-to-completion apps (e.g. batch Jobs). Container v1 core show example Container Config to run nginx (must be embedded in a PodSpec to run). name: nginx # Run the nginx:1.14 image image: nginx:1.14 GroupVersionKind corev1Container Warning:Containers are only ever created within the context of a Pod. This is usually done using a Controller. See Controllers: Deployment, Job, or StatefulSet Appears In: PodSpec [core/v1] FieldDescription argsstring arrayArguments to the entrypoint. The container image's CMD is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container's environment. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. "$$(VAR_NAME)" will produce the string literal "$(VAR_NAME)". Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell commandstring arrayEntrypoint array. Not executed within a shell. The container image's ENTRYPOINT is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container's environment. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. "$$(VAR_NAME)" will produce the string literal "$(VAR_NAME)". Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell envEnvVar arraypatch strategy: mergepatch merge key: nameList of environment variables to set in the container. Cannot be updated. envFromEnvFromSource arrayList of sources to populate environment variables in the container. The keys defined within a source may consist of any printable ASCII characters except '='. When a key exists in multiple sources, the value associated with the last source will take precedence. Values defined by an Env with a duplicate key will take precedence. Cannot be updated. imagestringContainer image name. More info: https://kubernetes.io/docs/concepts/containers/images This field is optional to allow higher level config management to default or override container images in workload controllers like Deployments and StatefulSets. imagePullPolicystringImage pull policy. One of Always, Never, IfNotPresent. Defaults to Always if :latest tag is specified, or IfNotPresent otherwise. Cannot be updated. More info: https://kubernetes.io/docs/concepts/containers/images#updating-images lifecycleLifecycleActions that the management system should take in response to container lifecycle events. Cannot be updated. livenessProbeProbePeriodic probe of container liveness. Container will be restarted if the probe fails. Cannot be updated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes namestringName of the container specified as a DNS_LABEL. Each container in a pod must have a unique name (DNS_LABEL). Cannot be updated. portsContainerPort arraypatch strategy: mergepatch merge key: containerPortList of ports to expose from the container. Not specifying a port here DOES NOT prevent that port from being exposed. Any port which is listening on the default "0.0.0.0" address inside a container will be accessible from the network. Modifying this array with strategic merge patch may corrupt the data. For more information See https://github.com/kubernetes/kubernetes/issues/108255. Cannot be updated. readinessProbeProbePeriodic probe of container service readiness. Container will be removed from service endpoints if the probe fails. Cannot be updated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes resizePolicyContainerResizePolicy arrayResources resize policy for the container. resourcesResourceRequirementsCompute Resources required by this container. Cannot be updated. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/ restartPolicystringRestartPolicy defines the restart behavior of individual containers in a pod. This overrides the pod-level restart policy. When this field is not specified, the restart behavior is defined by the Pod's restart policy and the container type. Additionally, setting the RestartPolicy as "Always" for the init container will have the following effect: this init container will be continually restarted on exit until all regular containers have terminated. Once all regular containers have completed, all init containers with restartPolicy "Always" will be shut down. This lifecycle differs from normal init containers and is often referred to as a "sidecar" container. Although this init container still starts in the init container sequence, it does not wait for the container to complete before proceeding to the