kubernetes reference contenttype tool reference Resource Types title Kubelet Configuration v1beta1 package kubelet config k8s io v1beta1 autogenerated true

Answer:
---
title: Kubelet Configuration (v1beta1)
content_type: tool-reference
package: kubelet.config.k8s.io/v1beta1
auto_generated: true
---

## Resource Types

- [CredentialProviderConfig](#kubelet-config-k8s-io-v1beta1-CredentialProviderConfig)
- [KubeletConfiguration](#kubelet-config-k8s-io-v1beta1-KubeletConfiguration)
- [SerializedNodeConfigSource](#kubelet-config-k8s-io-v1beta1-SerializedNodeConfigSource)

## `FormatOptions`     {#FormatOptions}

**Appears in:**

- [LoggingConfiguration](#LoggingConfiguration)

FormatOptions contains options for the different logging formats.

Field	Description

text [Required]

TextOptions

[Alpha] Text contains options for logging format "text".
Only available when the LoggingAlphaOptions feature gate is enabled.

json [Required]

JSONOptions

[Alpha] JSON contains options for logging format "json".
Only available when the LoggingAlphaOptions feature gate is enabled.

## `JSONOptions`     {#JSONOptions}

**Appears in:**

- [FormatOptions](#FormatOptions)

JSONOptions contains options for logging format "json".

Field	Description

OutputRoutingOptions [Required]

OutputRoutingOptions

(Members of OutputRoutingOptions are embedded into this type.)
   No description provided.

## `LogFormatFactory`     {#LogFormatFactory}

LogFormatFactory provides support for a certain additional,
non-default log format.

## `LoggingConfiguration`     {#LoggingConfiguration}

**Appears in:**

- [KubeletConfiguration](#kubelet-config-k8s-io-v1beta1-KubeletConfiguration)

LoggingConfiguration contains logging options.

Field	Description

format [Required]

string

Format Flag specifies the structure of log messages.
default value of format is text

flushFrequency [Required]

TimeOrMetaDuration

Maximum time between log flushes.
If a string, parsed as a duration (i.e. "1s")
If an int, the maximum number of nanoseconds (i.e. 1s = 1000000000).
Ignored if the selected logging backend writes log messages without buffering.

verbosity [Required]

VerbosityLevel

Verbosity is the threshold that determines which log messages are
logged. Default is zero which logs only the most important
messages. Higher values enable additional messages. Error messages
are always logged.

vmodule [Required]

VModuleConfiguration

VModule overrides the verbosity threshold for individual files.
Only supported for "text" log format.

options [Required]

FormatOptions

[Alpha] Options holds additional parameters that are specific
to the different logging formats. Only the options for the selected
format get used, but all of them get validated.
Only available when the LoggingAlphaOptions feature gate is enabled.

## `LoggingOptions`     {#LoggingOptions}

LoggingOptions can be used with ValidateAndApplyWithOptions to override
certain global defaults.

Field	Description

ErrorStream [Required]

io.Writer

ErrorStream can be used to override the os.Stderr default.

InfoStream [Required]

io.Writer

InfoStream can be used to override the os.Stdout default.

## `OutputRoutingOptions`     {#OutputRoutingOptions}

**Appears in:**

- [JSONOptions](#JSONOptions)

- [TextOptions](#TextOptions)

OutputRoutingOptions contains options that are supported by both "text" and "json".

Field	Description

splitStream [Required]

bool

[Alpha] SplitStream redirects error messages to stderr while
info messages go to stdout, with buffering. The default is to write
both to stdout, without buffering. Only available when
the LoggingAlphaOptions feature gate is enabled.

infoBufferSize [Required]

k8s.io/apimachinery/pkg/api/resource.QuantityValue

[Alpha] InfoBufferSize sets the size of the info stream when
using split streams. The default is zero, which disables buffering.
Only available when the LoggingAlphaOptions feature gate is enabled.

## `TextOptions`     {#TextOptions}

**Appears in:**

- [FormatOptions](#FormatOptions)

TextOptions contains options for logging format "text".

Field	Description

OutputRoutingOptions [Required]

OutputRoutingOptions

(Members of OutputRoutingOptions are embedded into this type.)
   No description provided.

## `TimeOrMetaDuration`     {#TimeOrMetaDuration}

**Appears in:**

- [LoggingConfiguration](#LoggingConfiguration)

TimeOrMetaDuration is present only for backwards compatibility for the
flushFrequency field, and new fields should use metav1.Duration.

Field	Description

Duration [Required]

meta/v1.Duration

Duration holds the duration

- [Required]

bool

SerializeAsString controls whether the value is serialized as a string or an integer

## `TracingConfiguration`     {#TracingConfiguration}

**Appears in:**

- [KubeletConfiguration](#kubelet-config-k8s-io-v1beta1-KubeletConfiguration)

TracingConfiguration provides versioned configuration for OpenTelemetry tracing clients.

Field	Description

endpoint

string

Endpoint of the collector this component will report traces to.
The connection is insecure, and does not currently support TLS.
Recommended is unset, and endpoint is the otlp grpc default, localhost:4317.

samplingRatePerMillion

int32

SamplingRatePerMillion is the number of samples to collect per million spans.
Recommended is unset. If unset, sampler respects its parent span's sampling
rate, but otherwise never samples.

## `VModuleConfiguration`     {#VModuleConfiguration}

(Alias of `[]k8s.io/component-base/logs/api/v1.VModuleItem`)

**Appears in:**

- [LoggingConfiguration](#LoggingConfiguration)

VModuleConfiguration is a collection of individual file names or patterns
and the corresponding verbosity threshold.

## `VerbosityLevel`     {#VerbosityLevel}

(Alias of `uint32`)

**Appears in:**

- [LoggingConfiguration](#LoggingConfiguration)

VerbosityLevel represents a klog or logr verbosity threshold.

## `CredentialProviderConfig`     {#kubelet-config-k8s-io-v1beta1-CredentialProviderConfig}

CredentialProviderConfig is the configuration containing information about
each exec credential provider. Kubelet reads this configuration from disk and enables
each provider as specified by the CredentialProvider type.

Field	Description

apiVersion
string	kubelet.config.k8s.io/v1beta1

kind
string	CredentialProviderConfig

providers [Required]

[]CredentialProvider

providers is a list of credential provider plugins that will be enabled by the kubelet.
Multiple providers may match against a single image, in which case credentials
from all providers will be returned to the kubelet. If multiple providers are called
for a single image, the results are combined. If providers return overlapping
auth keys, the value from the provider earlier in this list is used.

## `KubeletConfiguration`     {#kubelet-config-k8s-io-v1beta1-KubeletConfiguration}

KubeletConfiguration contains the configuration for the Kubelet

Field	Description

apiVersion
string	kubelet.config.k8s.io/v1beta1

kind
string	KubeletConfiguration

enableServer [Required]

bool

enableServer enables Kubelet's secured server.
Note: Kubelet's insecure port is controlled by the readOnlyPort option.
Default: true

staticPodPath

string

staticPodPath is the path to the directory containing local (static) pods to
run, or the path to a single static pod file.
Default: ""

podLogsDir

string

podLogsDir is a custom root directory path kubelet will use to place pod's log files.
Default: "/var/log/pods/"
Note: it is not recommended to use the temp folder as a log directory as it may cause
unexpected behavior in many places.

syncFrequency

meta/v1.Duration

syncFrequency is the max period between synchronizing running
containers and config.
Default: "1m"

fileCheckFrequency

meta/v1.Duration

fileCheckFrequency is the duration between checking config files for
new data.
Default: "20s"

httpCheckFrequency

meta/v1.Duration

httpCheckFrequency is the duration between checking http for new data.
Default: "20s"

staticPodURL

string

staticPodURL is the URL for accessing static pods to run.
Default: ""

staticPodURLHeader

map[string][]string

staticPodURLHeader is a map of slices with HTTP headers to use when accessing the podURL.
Default: nil

address

string

address is the IP address for the Kubelet to serve on (set to 0.0.0.0
for all interfaces).
Default: "0.0.0.0"

port

int32

port is the port for the Kubelet to serve on.
The port number must be between 1 and 65535, inclusive.
Default: 10250

readOnlyPort

int32

readOnlyPort is the read-only port for the Kubelet to serve on with
no authentication/authorization.
The port number must be between 1 and 65535, inclusive.
Setting this field to 0 disables the read-only service.
Default: 0 (disabled)

tlsCertFile

string

tlsCertFile is the file containing x509 Certificate for HTTPS. (CA cert,
if any, concatenated after server cert). If tlsCertFile and
tlsPrivateKeyFile are not provided, a self-signed certificate
and key are generated for the public address and saved to the directory
passed to the Kubelet's --cert-dir flag.
Default: ""

tlsPrivateKeyFile

string

tlsPrivateKeyFile is the file containing x509 private key matching tlsCertFile.
Default: ""

tlsCipherSuites

[]string

tlsCipherSuites is the list of allowed cipher suites for the server.
Note that TLS 1.3 ciphersuites are not configurable.
Values are from tls package constants (https://golang.org/pkg/crypto/tls/#pkg-constants).
Default: nil

tlsMinVersion

string

tlsMinVersion is the minimum TLS version supported.
Values are from tls package constants (https://golang.org/pkg/crypto/tls/#pkg-constants).
Default: ""

rotateCertificates

bool

rotateCertificates enables client certificate rotation. The Kubelet will request a
new certificate from the certificates.k8s.io API. This requires an approver to approve the
certificate signing requests.
Default: false

serverTLSBootstrap

bool

serverTLSBootstrap enables server certificate bootstrap. Instead of self
signing a serving certificate, the Kubelet will request a certificate from
the 'certificates.k8s.io' API. This requires an approver to approve the
certificate signing requests (CSR). The RotateKubeletServerCertificate feature
must be enabled when setting this field.
Default: false

authentication

KubeletAuthentication

authentication specifies how requests to the Kubelet's server are authenticated.
Defaults:
anonymous:
enabled: false
webhook:
enabled: true
cacheTTL: "2m"

authorization

KubeletAuthorization

authorization specifies how requests to the Kubelet's server are authorized.
Defaults:
mode: Webhook
webhook:
cacheAuthorizedTTL: "5m"
cacheUnauthorizedTTL: "30s"

registryPullQPS

int32

registryPullQPS is the limit of registry pulls per second.
The value must not be a negative number.
Setting it to 0 means no limit.
Default: 5

registryBurst

int32

registryBurst is the maximum size of bursty pulls, temporarily allows
pulls to burst to this number, while still not exceeding registryPullQPS.
The value must not be a negative number.
Only used if registryPullQPS is greater than 0.
Default: 10

eventRecordQPS

int32

eventRecordQPS is the maximum event creations per second. If 0, there
is no limit enforced. The value cannot be a negative number.
Default: 50

eventBurst

int32

eventBurst is the maximum size of a burst of event creations, temporarily
allows event creations to burst to this number, while still not exceeding
eventRecordQPS. This field canot be a negative number and it is only used
when eventRecordQPS > 0.
Default: 100

enableDebuggingHandlers

bool

enableDebuggingHandlers enables server endpoints for log access
and local running of containers and commands, including the exec,
attach, logs, and portforward features.
Default: true

enableContentionProfiling

bool

enableContentionProfiling enables block profiling, if enableDebuggingHandlers is true.
Default: false

healthzPort

int32

healthzPort is the port of the localhost healthz endpoint (set to 0 to disable).
A valid number is between 1 and 65535.
Default: 10248

healthzBindAddress

string

healthzBindAddress is the IP address for the healthz server to serve on.
Default: "127.0.0.1"

oomScoreAdj

int32

oomScoreAdj is The oom-score-adj value for kubelet process. Values
must be within the range [-1000, 1000].
Default: -999

clusterDomain

string

clusterDomain is the DNS domain for this cluster. If set, kubelet will
configure all containers to search this domain in addition to the
host's search domains.
Default: ""

clusterDNS

[]string

clusterDNS is a list of IP addresses for the cluster DNS server. If set,
kubelet will configure all containers to use this for DNS resolution
instead of the host's DNS servers.
Default: nil

streamingConnectionIdleTimeout

meta/v1.Duration

streamingConnectionIdleTimeout is the maximum time a streaming connection
can be idle before the connection is automatically closed.
Default: "4h"

nodeStatusUpdateFrequency

meta/v1.Duration

nodeStatusUpdateFrequency is the frequency that kubelet computes node
status. If node lease feature is not enabled, it is also the frequency that
kubelet posts node status to master.
Note: When node lease feature is not enabled, be cautious when changing the
constant, it must work with nodeMonitorGracePeriod in nodecontroller.
Default: "10s"

nodeStatusReportFrequency

meta/v1.Duration

nodeStatusReportFrequency is the frequency that kubelet posts node
status to master if node status does not change. Kubelet will ignore this
frequency and post node status immediately if any change is detected. It is
only used when node lease feature is enabled. nodeStatusReportFrequency's
default value is 5m. But if nodeStatusUpdateFrequency is set explicitly,
nodeStatusReportFrequency's default value will be set to
nodeStatusUpdateFrequency for backward compatibility.
Default: "5m"

nodeLeaseDurationSeconds

int32

nodeLeaseDurationSeconds is the duration the Kubelet will set on its corresponding Lease.
NodeLease provides an indicator of node health by having the Kubelet create and
periodically renew a lease, named after the node, in the kube-node-lease namespace.
If the lease expires, the node can be considered unhealthy.
The lease is currently renewed every 10s, per KEP-0009. In the future, the lease renewal
interval may be set based on the lease duration.
The field value must be greater than 0.
Default: 40

imageMinimumGCAge

meta/v1.Duration

imageMinimumGCAge is the minimum age for an unused image before it is
garbage collected.
Default: "2m"

imageMaximumGCAge

meta/v1.Duration

imageMaximumGCAge is the maximum age an image can be unused before it is garbage collected.
The default of this field is "0s", which disables this field--meaning images won't be garbage
collected based on being unused for too long.
Default: "0s" (disabled)

imageGCHighThresholdPercent

int32

imageGCHighThresholdPercent is the percent of disk usage after which
image garbage collection is always run. The percent is calculated by
dividing this field value by 100, so this field must be between 0 and
100, inclusive. When specified, the value must be greater than
imageGCLowThresholdPercent.
Default: 85

imageGCLowThresholdPercent

int32

imageGCLowThresholdPercent is the percent of disk usage before which
image garbage collection is never run. Lowest disk usage to garbage
collect to. The percent is calculated by dividing this field value by 100,
so the field value must be between 0 and 100, inclusive. When specified, the
value must be less than imageGCHighThresholdPercent.
Default: 80

volumeStatsAggPeriod

meta/v1.Duration

volumeStatsAggPeriod is the frequency for calculating and caching volume
disk usage for all pods.
Default: "1m"

kubeletCgroups

string

kubeletCgroups is the absolute name of cgroups to isolate the kubelet in
Default: ""

systemCgroups

string

systemCgroups is absolute name of cgroups in which to place
all non-kernel processes that are not already in a container. Empty
for no container. Rolling back the flag requires a reboot.
The cgroupRoot must be specified if this field is not empty.
Default: ""

cgroupRoot

string

cgroupRoot is the root cgroup to use for pods. This is handled by the
container runtime on a best effort basis.

cgroupsPerQOS

bool

cgroupsPerQOS enable QoS based CGroup hierarchy: top level CGroups for QoS classes
and all Burstable and BestEffort Pods are brought up under their specific top level
QoS CGroup.
Default: true

cgroupDriver

string

cgroupDriver is the driver kubelet uses to manipulate CGroups on the host (cgroupfs
or systemd).
Default: "cgroupfs"

cpuManagerPolicy

string

cpuManagerPolicy is the name of the policy to use.
Requires the CPUManager feature gate to be enabled.
Default: "None"

cpuManagerPolicyOptions

map[string]string

cpuManagerPolicyOptions is a set of key=value which 	allows to set extra options
to fine tune the behaviour of the cpu manager policies.
Requires  both the "CPUManager" and "CPUManagerPolicyOptions" feature gates to be enabled.
Default: nil

cpuManagerReconcilePeriod

meta/v1.Duration

cpuManagerReconcilePeriod is the reconciliation period for the CPU Manager.
Requires the CPUManager feature gate to be enabled.
Default: "10s"

memoryManagerPolicy

string

memoryManagerPolicy is the name of the policy to use by memory manager.
Requires the MemoryManager feature gate to be enabled.
Default: "none"

topologyManagerPolicy

string

topologyManagerPolicy is the name of the topology manager policy to use.
Valid values include:

restricted: kubelet only allows pods with optimal NUMA node alignment for
requested resources;

best-effort: kubelet will favor pods with NUMA alignment of CPU and device
resources;

none: kubelet has no knowledge of NUMA alignment of a pod's CPU and device resources.

single-numa-node: kubelet only allows pods with a single NUMA alignment
of CPU and device resources.

Default: "none"

topologyManagerScope

string

topologyManagerScope represents the scope of topology hint generation
that topology manager requests and hint providers generate. Valid values include:

container: topology policy is applied on a per-container basis.

pod: topology policy is applied on a per-pod basis.

Default: "container"

topologyManagerPolicyOptions

map[string]string

TopologyManagerPolicyOptions is a set of key=value which allows to set extra options
to fine tune the behaviour of the topology manager policies.
Requires  both the "TopologyManager" and "TopologyManagerPolicyOptions" feature gates to be enabled.
Default: nil

qosReserved

map[string]string

qosReserved is a set of resource name to percentage pairs that specify
the minimum percentage of a resource reserved for exclusive use by the
guaranteed QoS tier.
Currently supported resources: "memory"
Requires the QOSReserved feature gate to be enabled.
Default: nil

runtimeRequestTimeout

meta/v1.Duration

runtimeRequestTimeout is the timeout for all runtime requests except long running
requests - pull, logs, exec and attach.
Default: "2m"

hairpinMode

string

hairpinMode specifies how the Kubelet should configure the container
bridge for hairpin packets.
Setting this flag allows endpoints in a Service to loadbalance back to
themselves if they should try to access their own Service. Values:

"promiscuous-bridge": make the container bridge promiscuous.

"hairpin-veth":       set the hairpin flag on container veth interfaces.

"none":               do nothing.

Generally, one must set --hairpin-mode=hairpin-veth to achieve hairpin NAT,
because promiscuous-bridge assumes the existence of a container bridge named cbr0.
Default: "promiscuous-bridge"

maxPods

int32

maxPods is the maximum number of Pods that can run on this Kubelet.
The value must be a non-negative integer.
Default: 110

podCIDR

string

podCIDR is the CIDR to use for pod IP addresses, only used in standalone mode.
In cluster mode, this is obtained from the control plane.
Default: ""

podPidsLimit

int64

podPidsLimit is the maximum number of PIDs in any pod.
Default: -1

resolvConf

string

resolvConf is the resolver configuration file used as the basis
for the container DNS resolution configuration.
If set to the empty string, will override the default and effectively disable DNS lookups.
Default: "/etc/resolv.conf"

runOnce

bool

runOnce causes the Kubelet to check the API server once for pods,
run those in addition to the pods specified by static pod files, and exit.
Default: false

cpuCFSQuota

bool

cpuCFSQuota enables CPU CFS quota enforcement for containers that
specify CPU limits.
Default: true

cpuCFSQuotaPeriod

meta/v1.Duration

cpuCFSQuotaPeriod is the CPU CFS quota period value, cpu.cfs_period_us.
The value must be between 1 ms and 1 second, inclusive.
Requires the CustomCPUCFSQuotaPeriod feature gate to be enabled.
Default: "100ms"

nodeStatusMaxImages

int32

nodeStatusMaxImages caps the number of images reported in Node.status.images.
The value must be greater than -2.
Note: If -1 is specified, no cap will be applied. If 0 is specified, no image is returned.
Default: 50

maxOpenFiles

int64

maxOpenFiles is Number of files that can be opened by Kubelet process.
The value must be a non-negative number.
Default: 1000000

contentType

string

contentType is contentType of requests sent to apiserver.
Default: "application/vnd.kubernetes.protobuf"

kubeAPIQPS

int32

kubeAPIQPS is the QPS to use while talking with kubernetes apiserver.
Default: 50

kubeAPIBurst

int32

kubeAPIBurst is the burst to allow while talking with kubernetes API server.
This field cannot be a negative number.
Default: 100

serializeImagePulls

bool

serializeImagePulls when enabled, tells the Kubelet to pull images one
at a time. We recommend not changing the default value on nodes that
run docker daemon with version  < 1.9 or an Aufs storage backend.
Issue #10959 has more details.
Default: true

maxParallelImagePulls

int32

MaxParallelImagePulls sets the maximum number of image pulls in parallel.
This field cannot be set if SerializeImagePulls is true.
Setting it to nil means no limit.
Default: nil

evictionHard

map[string]string

evictionHard is a map of signal names to quantities that defines hard eviction
thresholds. For example: {"memory.available": "300Mi"}.
To explicitly disable, pass a 0% or 100% threshold on an arbitrary resource.
Default:
memory.available:  "100Mi"
nodefs.available:  "10%"
nodefs.inodesFree: "5%"
imagefs.available: "15%"

evictionSoft

map[string]string

evictionSoft is a map of signal names to quantities that defines soft eviction thresholds.
For example: {"memory.available": "300Mi"}.
Default: nil

evictionSoftGracePeriod

map[string]string

evictionSoftGracePeriod is a map of signal names to quantities that defines grace
periods for each soft eviction signal. For example: {"memory.available": "30s"}.
Default: nil

evictionPressureTransitionPeriod

meta/v1.Duration

evictionPressureTransitionPeriod is the duration for which the kubelet has to wait
before transitioning out of an eviction pressure condition.
Default: "5m"

evictionMaxPodGracePeriod

int32

evictionMaxPodGracePeriod is the maximum allowed grace period (in seconds) to use
when terminating pods in response to a soft eviction threshold being met. This value
effectively caps the Pod's terminationGracePeriodSeconds value during soft evictions.
Note: Due to issue #64530, the behavior has a bug where this value currently just
overrides the grace period during soft eviction, which can increase the grace
period from what is set on the Pod. This bug will be fixed in a future release.
Default: 0

evictionMinimumReclaim

map[string]string

evictionMinimumReclaim is a map of signal names to quantities that defines minimum reclaims,
which describe the minimum amount of a given resource the kubelet will reclaim when
performing a pod eviction while that resource is under pressure.
For example: {"imagefs.available": "2Gi"}.
Default: nil

podsPerCore

int32

podsPerCore is the maximum number of pods per core. Cannot exceed maxPods.
The value must be a non-negative integer.
If 0, there is no limit on the number of Pods.
Default: 0

enableControllerAttachDetach

bool

enableControllerAttachDetach enables the Attach/Detach controller to
manage attachment/detachment of volumes scheduled to this node, and
disables kubelet from executing any attach/detach operations.
Note: attaching/detaching CSI volumes is not supported by the kubelet,
so this option needs to be true for that use case.
Default: true

protectKernelDefaults

bool

protectKernelDefaults, if true, causes the Kubelet to error if kernel
flags are not as it expects. Otherwise the Kubelet will attempt to modify
kernel flags to match its expectation.
Default: false

makeIPTablesUtilChains

bool

makeIPTablesUtilChains, if true, causes the Kubelet to create the
KUBE-IPTABLES-HINT chain in iptables as a hint to other components about the
configuration of iptables on the system.
Default: true

iptablesMasqueradeBit

int32

iptablesMasqueradeBit formerly controlled the creation of the KUBE-MARK-MASQ
chain.
Deprecated: no longer has any effect.
Default: 14

iptablesDropBit

int32

iptablesDropBit formerly controlled the creation of the KUBE-MARK-DROP chain.
Deprecated: no longer has any effect.
Default: 15

featureGates

map[string]bool

featureGates is a map of feature names to bools that enable or disable experimental
features. This field modifies piecemeal the built-in default values from
"k8s.io/kubernetes/pkg/features/kube_features.go".
Default: nil

failSwapOn

bool

failSwapOn tells the Kubelet to fail to start if swap is enabled on the node.
Default: true

memorySwap

MemorySwapConfiguration

memorySwap configures swap memory available to container workloads.

containerLogMaxSize

string

containerLogMaxSize is a quantity defining the maximum size of the container log
file before it is rotated. For example: "5Mi" or "256Ki".
Default: "10Mi"

containerLogMaxFiles

int32

containerLogMaxFiles specifies the maximum number of container log files that can
be present for a container.
Default: 5

containerLogMaxWorkers

int32

ContainerLogMaxWorkers specifies the maximum number of concurrent workers to spawn
for performing the log rotate operations. Set this count to 1 for disabling the
concurrent log rotation workflows
Default: 1

containerLogMonitorInterval

meta/v1.Duration

ContainerLogMonitorInterval specifies the duration at which the container logs are monitored
for performing the log rotate operation. This defaults to 10 * time.Seconds. But can be
customized to a smaller value based on the log generation rate and the size required to be
rotated against
Default: 10s

configMapAndSecretChangeDetectionStrategy

ResourceChangeDetectionStrategy

configMapAndSecretChangeDetectionStrategy is a mode in which ConfigMap and Secret
managers are running. Valid values include:

Get: kubelet fetches necessary objects directly from the API server;

Cache: kubelet uses TTL cache for object fetched from the API server;

Watch: kubelet uses watches to observe changes to objects that are in its interest.

Default: "Watch"

systemReserved

map[string]string

systemReserved is a set of ResourceName=ResourceQuantity (e.g. cpu=200m,memory=150G)
pairs that describe resources reserved for non-kubernetes components.
Currently only cpu and memory are supported.
See http://kubernetes.io/docs/user-guide/compute-resources for more detail.
Default: nil

kubeReserved

map[string]string

kubeReserved is a set of ResourceName=ResourceQuantity (e.g. cpu=200m,memory=150G) pairs
that describe resources reserved for kubernetes system components.
Currently cpu, memory and local storage for root file system are supported.
See https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
for more details.
Default: nil

reservedSystemCPUs [Required]

string

The reservedSystemCPUs option specifies the CPU list reserved for the host
level system threads and kubernetes related threads. This provide a "static"
CPU list rather than the "dynamic" list by systemReserved and kubeReserved.
This option does not support systemReservedCgroup or kubeReservedCgroup.

showHiddenMetricsForVersion

string

showHiddenMetricsForVersion is the previous version for which you want to show
hidden metrics.
Only the previous minor version is meaningful, other values will not be allowed.
The format is <major>.<minor>, e.g.: 1.16.
The purpose of this format is make sure you have the opportunity to notice
if the next release hides additional metrics, rather than being surprised
when they are permanently removed in the release after that.
Default: ""

systemReservedCgroup

string

systemReservedCgroup helps the kubelet identify absolute name of top level CGroup used
to enforce systemReserved compute resource reservation for OS system daemons.
Refer to Node Allocatable
doc for more information.
Default: ""

kubeReservedCgroup

string

kubeReservedCgroup helps the kubelet identify absolute name of top level CGroup used
to enforce KubeReserved compute resource reservation for Kubernetes node system daemons.
Refer to Node Allocatable
doc for more information.
Default: ""

enforceNodeAllocatable

[]string

This flag specifies the various Node Allocatable enforcements that Kubelet needs to perform.
This flag accepts a list of options. Acceptable options are none, pods,
system-reserved and kube-reserved.
If none is specified, no other options may be specified.
When system-reserved is in the list, systemReservedCgroup must be specified.
When kube-reserved is in the list, kubeReservedCgroup must be specified.
This field is supported only when cgroupsPerQOS is set to true.
Refer to Node Allocatable
for more information.
Default: ["pods"]

allowedUnsafeSysctls

[]string

A comma separated whitelist of unsafe sysctls or sysctl patterns (ending in *).
Unsafe sysctl groups are kernel.shm*, kernel.msg*, kernel.sem, fs.mqueue.*,
and net.*. For example: "kernel.msg*,net.ipv4.route.min_pmtu"
Default: []

volumePluginDir

string

volumePluginDir is the full path of the directory in which to search
for additional third party volume plugins.
Default: "/usr/libexec/kubernetes/kubelet-plugins/volume/exec/"

providerID

string

providerID, if set, sets the unique ID of the instance that an external
provider (i.e. cloudprovider) can use to identify a specific node.
Default: ""

kernelMemcgNotification

bool

kernelMemcgNotification, if set, instructs the kubelet to integrate with the
kernel memcg notification for determining if memory eviction thresholds are
exceeded rather than polling.
Default: false

logging [Required]

LoggingConfiguration

logging specifies the options of logging.
Refer to Logs Options
for more information.
Default:
Format: text

enableSystemLogHandler

bool

enableSystemLogHandler enables system logs via web interface host:port/logs/
Default: true

enableSystemLogQuery

bool

enableSystemLogQuery enables the node log query feature on the /logs endpoint.
EnableSystemLogHandler has to be enabled in addition for this feature to work.
Default: false

shutdownGracePeriod

meta/v1.Duration

shutdownGracePeriod specifies the total duration that the node should delay the
shutdown and total grace period for pod termination during a node shutdown.
Default: "0s"

shutdownGracePeriodCriticalPods

meta/v1.Duration

shutdownGracePeriodCriticalPods specifies the duration used to terminate critical
pods during a node shutdown. This should be less than shutdownGracePeriod.
For example, if shutdownGracePeriod=30s, and shutdownGracePeriodCriticalPods=10s,
during a node shutdown the first 20 seconds would be reserved for gracefully
terminating normal pods, and the last 10 seconds would be reserved for terminating
critical pods.
Default: "0s"

shutdownGracePeriodByPodPriority

[]ShutdownGracePeriodByPodPriority

shutdownGracePeriodByPodPriority specifies the shutdown grace period for Pods based
on their associated priority class value.
When a shutdown request is received, the Kubelet will initiate shutdown on all pods
running on the node with a grace period that depends on the priority of the pod,
and then wait for all pods to exit.
Each entry in the array represents the graceful shutdown time a pod with a priority
class value that lies in the range of that value and the next higher entry in the
list when the node is shutting down.
For example, to allow critical pods 10s to shutdown, priority>=10000 pods 20s to
shutdown, and all remaining pods 30s to shutdown.

shutdownGracePeriodByPodPriority:

priority: 2000000000
shutdownGracePeriodSeconds: 10

priority: 10000
shutdownGracePeriodSeconds: 20

priority: 0
shutdownGracePeriodSeconds: 30

The time the Kubelet will wait before exiting will at most be the maximum of all
shutdownGracePeriodSeconds for each priority class range represented on the node.
When all pods have exited or reached their grace periods, the Kubelet will release
the shutdown inhibit lock.
Requires the GracefulNodeShutdown feature gate to be enabled.
This configuration must be empty if either ShutdownGracePeriod or ShutdownGracePeriodCriticalPods is set.
Default: nil

reservedMemory

[]MemoryReservation

reservedMemory specifies a comma-separated list of memory reservations for NUMA nodes.
The parameter makes sense only in the context of the memory manager feature.
The memory manager will not allocate reserved memory for container workloads.
For example, if you have a NUMA0 with 10Gi of memory and the reservedMemory was
specified to reserve 1Gi of memory at NUMA0, the memory manager will assume that
only 9Gi is available for allocation.
You can specify a different amount of NUMA node and memory types.
You can omit this parameter at all, but you should be aware that the amount of
reserved memory from all NUMA nodes should be equal to the amount of memory specified
by the node allocatable.
If at least one node allocatable parameter has a non-zero value, you will need
to specify at least one NUMA node.
Also, avoid specifying:

Duplicates, the same NUMA node, and memory type, but with a different value.

zero limits for any memory type.

NUMAs nodes IDs that do not exist under the machine.

memory types except for memory and hugepages-

Default: nil

enableProfilingHandler

bool

enableProfilingHandler enables profiling via web interface host:port/debug/pprof/
Default: true

enableDebugFlagsHandler

bool

enableDebugFlagsHandler enables flags endpoint via web interface host:port/debug/flags/v
Default: true

seccompDefault

bool

SeccompDefault enables the use of RuntimeDefault as the default seccomp profile for all workloads.
Default: false

memoryThrottlingFactor

float64

MemoryThrottlingFactor specifies the factor multiplied by the memory limit or node allocatable memory
when setting the cgroupv2 memory.high value to enforce MemoryQoS.
Decreasing this factor will set lower high limit for container cgroups and put heavier reclaim pressure
while increasing will put less reclaim pressure.
See https://kep.k8s.io/2570 for more details.
Default: 0.9

registerWithTaints

[]core/v1.Taint

registerWithTaints are an array of taints to add to a node object when
the kubelet registers itself. This only takes effect when registerNode
is true and upon the initial registration of the node.
Default: nil

registerNode

bool

registerNode enables automatic registration with the apiserver.
Default: true

tracing

TracingConfiguration

Tracing specifies the versioned configuration for OpenTelemetry tracing clients.
See https://kep.k8s.io/2832 for more details.
Default: nil

localStorageCapacityIsolation

bool

LocalStorageCapacityIsolation enables local ephemeral storage isolation feature. The default setting is true.
This feature allows users to set request/limit for container's ephemeral storage and manage it in a similar way
as cpu and memory. It also allows setting sizeLimit for emptyDir volume, which will trigger pod eviction if disk
usage from the volume exceeds the limit.
This feature depends on the capability of detecting correct root file system disk usage. For certain systems,
such as kind rootless, if this capability cannot be supported, the feature LocalStorageCapacityIsolation should be
disabled. Once disabled, user should not set request/limit for container's ephemeral storage, or sizeLimit for emptyDir.
Default: true

containerRuntimeEndpoint [Required]

string

ContainerRuntimeEndpoint is the endpoint of container runtime.
Unix Domain Sockets are supported on Linux, while npipe and tcp endpoints are supported on Windows.
Examples:'unix:///path/to/runtime.sock', 'npipe:////./pipe/runtime'

imageServiceEndpoint

string

ImageServiceEndpoint is the endpoint of container image service.
Unix Domain Socket are supported on Linux, while npipe and tcp endpoints are supported on Windows.
Examples:'unix:///path/to/runtime.sock', 'npipe:////./pipe/runtime'.
If not specified, the value in containerRuntimeEndpoint is used.

failCgroupV1

bool

FailCgroupV1 prevents the kubelet from starting on hosts
that use cgroup v1. By default, this is set to 'false', meaning
the kubelet is allowed to start on cgroup v1 hosts unless this
option is explicitly enabled.
Default: false

## `SerializedNodeConfigSource`     {#kubelet-config-k8s-io-v1beta1-SerializedNodeConfigSource}

SerializedNodeConfigSource allows us to serialize v1.NodeConfigSource.
This type is used internally by the Kubelet for tracking checkpointed dynamic configs.
It exists in the kubeletconfig API group because it is classified as a versioned input to the Kubelet.

Field	Description

apiVersion
string	kubelet.config.k8s.io/v1beta1

kind
string	SerializedNodeConfigSource

source

core/v1.NodeConfigSource

source is the source that we are serializing.

## `CredentialProvider`     {#kubelet-config-k8s-io-v1beta1-CredentialProvider}

**Appears in:**

- [CredentialProviderConfig](#kubelet-config-k8s-io-v1beta1-CredentialProviderConfig)

CredentialProvider represents an exec plugin to be invoked by the kubelet. The plugin is only
invoked when an image being pulled matches the images handled by the plugin (see matchImages).

Field	Description

name [Required]

string

name is the required name of the credential provider. It must match the name of the
provider executable as seen by the kubelet. The executable must be in the kubelet's
bin directory (set by the --image-credential-provider-bin-dir flag).

matchImages [Required]

[]string

matchImages is a required list of strings used to match against images in order to
determine if this provider should be invoked. If one of the strings matches the
requested image from the kubelet, the plugin will be invoked and given a chance
to provide credentials. Images are expected to contain the registry domain
and URL path.

Each entry in matchImages is a pattern which can optionally contain a port and a path.
Globs can be used in the domain, but not in the port or the path. Globs are supported
as subdomains like '.k8s.io' or 'k8s..io', and top-level-domains such as 'k8s.'.
Matching partial subdomains like 'app.k8s.io' is also supported. Each glob can only match
a single subdomain segment, so *.io does not match *.k8s.io.

A match exists between an image and a matchImage when all of the below are true:

Both contain the same number of domain parts and each part matches.

The URL path of an imageMatch must be a prefix of the target image URL path.

If the imageMatch contains a port, then the port must match in the image as well.

Example values of matchImages:

123456789.dkr.ecr.us-east-1.amazonaws.com

*.azurecr.io

gcr.io

..registry.io

registry.io:8080/path

defaultCacheDuration [Required]

meta/v1.Duration

defaultCacheDuration is the default duration the plugin will cache credentials in-memory
if a cache duration is not provided in the plugin response. This field is required.

apiVersion [Required]

string

Required input version of the exec CredentialProviderRequest. The returned CredentialProviderResponse
MUST use the same encoding version as the input. Current supported values are:

credentialprovider.kubelet.k8s.io/v1beta1

args

[]string

Arguments to pass to the command when executing it.

env

[]ExecEnvVar

Env defines additional environment variables to expose to the process. These
are unioned with the host's environment, as well as variables client-go uses
to pass argument to the plugin.

## `ExecEnvVar`     {#kubelet-config-k8s-io-v1beta1-ExecEnvVar}

**Appears in:**

- [CredentialProvider](#kubelet-config-k8s-io-v1beta1-CredentialProvider)

ExecEnvVar is used for setting environment variables when executing an exec-based
credential plugin.

Field	Description

name [Required]

string

   No description provided.

value [Required]

string

   No description provided.

## `KubeletAnonymousAuthentication`     {#kubelet-config-k8s-io-v1beta1-KubeletAnonymousAuthentication}

**Appears in:**

- [KubeletAuthentication](#kubelet-config-k8s-io-v1beta1-KubeletAuthentication)

Field	Description

enabled

bool

enabled allows anonymous requests to the kubelet server.
Requests that are not rejected by another authentication method are treated as
anonymous requests.
Anonymous requests have a username of system:anonymous, and a group name of
system:unauthenticated.

## `KubeletAuthentication`     {#kubelet-config-k8s-io-v1beta1-KubeletAuthentication}

**Appears in:**

- [KubeletConfiguration](#kubelet-config-k8s-io-v1beta1-KubeletConfiguration)

Field	Description

x509

KubeletX509Authentication

x509 contains settings related to x509 client certificate authentication.

webhook

KubeletWebhookAuthentication

webhook contains settings related to webhook bearer token authentication.

anonymous

KubeletAnonymousAuthentication

anonymous contains settings related to anonymous authentication.

## `KubeletAuthorization`     {#kubelet-config-k8s-io-v1beta1-KubeletAuthorization}

**Appears in:**

- [KubeletConfiguration](#kubelet-config-k8s-io-v1beta1-KubeletConfiguration)

Field	Description

mode

KubeletAuthorizationMode

mode is the authorization mode to apply to requests to the kubelet server.
Valid values are AlwaysAllow and Webhook.
Webhook mode uses the SubjectAccessReview API to determine authorization.

webhook

KubeletWebhookAuthorization

webhook contains settings related to Webhook authorization.

## `KubeletAuthorizationMode`     {#kubelet-config-k8s-io-v1beta1-KubeletAuthorizationMode}

(Alias of `string`)

**Appears in:**

- [KubeletAuthorization](#kubelet-config-k8s-io-v1beta1-KubeletAuthorization)

## `KubeletWebhookAuthentication`     {#kubelet-config-k8s-io-v1beta1-KubeletWebhookAuthentication}

**Appears in:**

- [KubeletAuthentication](#kubelet-config-k8s-io-v1beta1-KubeletAuthentication)

Field	Description

enabled

bool

enabled allows bearer token authentication backed by the
tokenreviews.authentication.k8s.io API.

cacheTTL

meta/v1.Duration

cacheTTL enables caching of authentication results

## `KubeletWebhookAuthorization`     {#kubelet-config-k8s-io-v1beta1-KubeletWebhookAuthorization}

**Appears in:**

- [KubeletAuthorization](#kubelet-config-k8s-io-v1beta1-KubeletAuthorization)

Field	Description

cacheAuthorizedTTL

meta/v1.Duration

cacheAuthorizedTTL is the duration to cache 'authorized' responses from the
webhook authorizer.

cacheUnauthorizedTTL

meta/v1.Duration

cacheUnauthorizedTTL is the duration to cache 'unauthorized' responses from
the webhook authorizer.

## `KubeletX509Authentication`     {#kubelet-config-k8s-io-v1beta1-KubeletX509Authentication}

**Appears in:**

- [KubeletAuthentication](#kubelet-config-k8s-io-v1beta1-KubeletAuthentication)

Field	Description

clientCAFile

string

clientCAFile is the path to a PEM-encoded certificate bundle. If set, any request
presenting a client certificate signed by one of the authorities in the bundle
is authenticated with a username corresponding to the CommonName,
and groups corresponding to the Organization in the client certificate.

## `MemoryReservation`     {#kubelet-config-k8s-io-v1beta1-MemoryReservation}

**Appears in:**

- [KubeletConfiguration](#kubelet-config-k8s-io-v1beta1-KubeletConfiguration)

MemoryReservation specifies the memory reservation of different types for each NUMA node

Field	Description

numaNode [Required]

int32

   No description provided.

limits [Required]

core/v1.ResourceList

   No description provided.

## `MemorySwapConfiguration`     {#kubelet-config-k8s-io-v1beta1-MemorySwapConfiguration}

**Appears in:**

- [KubeletConfiguration](#kubelet-config-k8s-io-v1beta1-KubeletConfiguration)

Field	Description

swapBehavior

string

swapBehavior configures swap memory available to container workloads. May be one of
"", "NoSwap": workloads can not use swap, default option.
"LimitedSwap": workload swap usage is limited. The swap limit is proportionate to the container's memory request.

## `ResourceChangeDetectionStrategy`     {#kubelet-config-k8s-io-v1beta1-ResourceChangeDetectionStrategy}

(Alias of `string`)

**Appears in:**

- [KubeletConfiguration](#kubelet-config-k8s-io-v1beta1-KubeletConfiguration)

ResourceChangeDetectionStrategy denotes a mode in which internal
managers (secret, configmap) are discovering object changes.

## `ShutdownGracePeriodByPodPriority`     {#kubelet-config-k8s-io-v1beta1-ShutdownGracePeriodByPodPriority}

**Appears in:**

- [KubeletConfiguration](#kubelet-config-k8s-io-v1beta1-KubeletConfiguration)

ShutdownGracePeriodByPodPriority specifies the shutdown grace period for Pods based on their associated priority class value

Field	Description

priority [Required]

int32

priority is the priority value associated with the shutdown grace period

shutdownGracePeriodSeconds [Required]

int64

shutdownGracePeriodSeconds is the shutdown grace period in seconds

title  Kubelet Configuration  v1beta1  content type  tool reference package  kubelet config k8s io v1beta1 auto generated  true          Resource Types       CredentialProviderConfig   kubelet config k8s io v1beta1 CredentialProviderConfig     KubeletConfiguration   kubelet config k8s io v1beta1 KubeletConfiguration     SerializedNodeConfigSource   kubelet config k8s io v1beta1 SerializedNodeConfigSource                    FormatOptions        FormatOptions          Appears in        LoggingConfiguration   LoggingConfiguration     p FormatOptions contains options for the different logging formats   p     table class  table    thead  tr  th width  30   Field  th  th Description  th   tr   thead   tbody           tr  td  code text  code   B  Required   B  br    a href   TextOptions   code TextOptions  code   a    td   td      p  Alpha  Text contains options for logging format  quot text quot   Only available when the LoggingAlphaOptions feature gate is enabled   p    td    tr   tr  td  code json  code   B  Required   B  br    a href   JSONOptions   code JSONOptions  code   a    td   td      p  Alpha  JSON contains options for logging format  quot json quot   Only available when the LoggingAlphaOptions feature gate is enabled   p    td    tr    tbody    table       JSONOptions        JSONOptions          Appears in        FormatOptions   FormatOptions     p JSONOptions contains options for logging format  quot json quot    p     table class  table    thead  tr  th width  30   Field  th  th Description  th   tr   thead   tbody           tr  td  code OutputRoutingOptions  code   B  Required   B  br    a href   OutputRoutingOptions   code OutputRoutingOptions  code   a    td   td  Members of  code OutputRoutingOptions  code  are embedded into this type       span class  text muted  No description provided   span   td    tr    tbody    table       LogFormatFactory        LogFormatFactory          p LogFormatFactory provides support for a certain additional  non default log format   p          LoggingConfiguration        LoggingConfiguration          Appears in        KubeletConfiguration   kubelet config k8s io v1beta1 KubeletConfiguration     p LoggingConfiguration contains logging options   p     table class  table    thead  tr  th width  30   Field  th  th Description  th   tr   thead   tbody           tr  td  code format  code   B  Required   B  br    code string  code    td   td      p Format Flag specifies the structure of log messages  default value of format is  code text  code   p    td    tr   tr  td  code flushFrequency  code   B  Required   B  br    a href   TimeOrMetaDuration   code TimeOrMetaDuration  code   a    td   td      p Maximum time between log flushes  If a string  parsed as a duration  i e   quot 1s quot   If an int  the maximum number of nanoseconds  i e  1s   1000000000   Ignored if the selected logging backend writes log messages without buffering   p    td    tr   tr  td  code verbosity  code   B  Required   B  br    a href   VerbosityLevel   code VerbosityLevel  code   a    td   td      p Verbosity is the threshold that determines which log messages are logged  Default is zero which logs only the most important messages  Higher values enable additional messages  Error messages are always logged   p    td    tr   tr  td  code vmodule  code   B  Required   B  br    a href   VModuleConfiguration   code VModuleConfiguration  code   a    td   td      p VModule overrides the verbosity threshold for individual files  Only supported for  quot text quot  log format   p    td    tr   tr  td  code options  code   B  Required   B  br    a href   FormatOptions   code FormatOptions  code   a    td   td      p  Alpha  Options holds additional parameters that are specific to the different logging formats  Only the options for the selected format get used  but all of them get validated  Only available when the LoggingAlphaOptions feature gate is enabled   p    td    tr    tbody    table       LoggingOptions        LoggingOptions          p LoggingOptions can be used with ValidateAndApplyWithOptions to override certain global defaults   p     table class  table    thead  tr  th width  30   Field  th  th Description  th   tr   thead   tbody           tr  td  code ErrorStream  code   B  Required   B  br    a href  https   pkg go dev io Writer   code io Writer  code   a    td   td      p ErrorStream can be used to override the os Stderr default   p    td    tr   tr  td  code InfoStream  code   B  Required   B  br    a href  https   pkg go dev io Writer   code io Writer  code   a    td   td      p InfoStream can be used to override the os Stdout default   p    td    tr    tbody    table       OutputRoutingOptions        OutputRoutingOptions          Appears in        JSONOptions   JSONOptions      TextOptions   TextOptions     p OutputRoutingOptions contains options that are supported by both  quot text quot  and  quot json quot    p     table class  table    thead  tr  th width  30   Field  th  th Description  th   tr   thead   tbody           tr  td  code splitStream  code   B  Required   B  br    code bool  code    td   td      p  Alpha  SplitStream redirects error messages to stderr while info messages go to stdout  with buffering  The default is to write both to stdout  without buffering  Only available when the LoggingAlphaOptions feature gate is enabled   p    td    tr   tr  td  code infoBufferSize  code   B  Required   B  br    a href  https   pkg go dev k8s io apimachinery pkg api resource QuantityValue   code k8s io apimachinery pkg api resource QuantityValue  code   a    td   td      p  Alpha  InfoBufferSize sets the size of the info stream when using split streams  The default is zero  which disables buffering  Only available when the LoggingAlphaOptions feature gate is enabled   p    td    tr    tbody    table       TextOptions        TextOptions          Appears in        FormatOptions   FormatOptions     p TextOptions contains options for logging format  quot text quot    p     table class  table    thead  tr  th width  30   Field  th  th Description  th   tr   thead   tbody           tr  td  code OutputRoutingOptions  code   B  Required   B  br    a href   OutputRoutingOptions   code OutputRoutingOptions  code   a    td   td  Members of  code OutputRoutingOptions  code  are embedded into this type       span class  text muted  No description provided   span   td    tr    tbody    table       TimeOrMetaDuration        TimeOrMetaDuration          Appears in        LoggingConfiguration   LoggingConfiguration     p TimeOrMetaDuration is present only for backwards compatibility for the flushFrequency field  and new fields should use metav1 Duration   p     table class  table    thead  tr  th width  30   Field  th  th Description  th   tr   thead   tbody           tr  td  code Duration  code   B  Required   B  br    a href  https   pkg go dev k8s io apimachinery pkg apis meta v1 Duration   code meta v1 Duration  code   a    td   td      p Duration holds the duration  p    td    tr   tr  td  code    code   B  Required   B  br    code bool  code    td   td      p SerializeAsString controls whether the value is serialized as a string or an integer  p    td    tr    tbody    table       TracingConfiguration        TracingConfiguration          Appears in        KubeletConfiguration   kubelet config k8s io v1beta1 KubeletConfiguration     p TracingConfiguration provides versioned configuration for OpenTelemetry tracing clients   p     table class  table    thead  tr  th width  30   Field  th  th Description  th   tr   thead   tbody           tr  td  code endpoint  code  br    code string  code    td   td      p Endpoint of the collector this component will report traces to  The connection is insecure  and does not currently support TLS  Recommended is unset  and endpoint is the otlp grpc default  localhost 4317   p    td    tr   tr  td  code samplingRatePerMillion  code  br    code int32  code    td   td      p SamplingRatePerMillion is the number of samples to collect per million spans  Recommended is unset  If unset  sampler respects its parent span s sampling rate  but otherwise never samples   p    td    tr    tbody    table       VModuleConfiguration        VModuleConfiguration        Alias of    k8s io component base logs api v1 VModuleItem      Appears in        LoggingConfiguration   LoggingConfiguration     p VModuleConfiguration is a collection of individual file names or patterns and the corresponding verbosity threshold   p          VerbosityLevel        VerbosityLevel        Alias of  uint32      Appears in        LoggingConfiguration   LoggingConfiguration      p VerbosityLevel represents a klog or logr verbosity threshold   p             CredentialProviderConfig        kubelet config k8s io v1beta1 CredentialProviderConfig          p CredentialProviderConfig is the configuration containing information about each exec credential provider  Kubelet reads this configuration from disk and enables each provider as specified by the CredentialProvider type   p     table class  table    thead  tr  th width  30   Field  th  th Description  th   tr   thead   tbody        tr  td  code apiVersion  code  br  string  td  td  code kubelet config k8s io v1beta1  code   td   tr   tr  td  code kind  code  br  string  td  td  code CredentialProviderConfig  code   td   tr           tr  td  code providers  code   B  Required   B  br    a href   kubelet config k8s io v1beta1 CredentialProvider   code   CredentialProvider  code   a    td   td      p providers is a list of credential provider plugins that will be enabled by the kubelet  Multiple providers may match against a single image  in which case credentials from all providers will be returned to the kubelet  If multiple providers are called for a single image  the results are combined  If providers return overlapping auth keys  the value from the provider earlier in this list is used   p    td    tr    tbody    table       KubeletConfiguration        kubelet config k8s io v1beta1 KubeletConfiguration          p KubeletConfiguration contains the configuration for the Kubelet  p     table class  table    thead  tr  th width  30   Field  th  th Description  th   tr   thead   tbody        tr  td  code apiVersion  code  br  string  td  td  code kubelet config k8s io v1beta1  code   td   tr   tr  td  code kind  code  br  string  td  td  code KubeletConfiguration  code   td   tr           tr  td  code enableServer  code   B  Required   B  br    code bool  code    td   td      p enableServer enables Kubelet s secured server  Note  Kubelet s insecure port is controlled by the readOnlyPort option  Default  true  p    td    tr   tr  td  code staticPodPath  code  br    code string  code    td   td      p staticPodPath is the path to the directory containing local  static  pods to run  or the path to a single static pod file  Default   quot  quot   p    td    tr   tr  td  code podLogsDir  code  br    code string  code    td   td      p podLogsDir is a custom root directory path kubelet will use to place pod s log files  Default   quot  var log pods  quot  Note  it is not recommended to use the temp folder as a log directory as it may cause unexpected behavior in many places   p    td    tr   tr  td  code syncFrequency  code  br    a href  https   pkg go dev k8s io apimachinery pkg apis meta v1 Duration   code meta v1 Duration  code   a    td   td      p syncFrequency is the max period between synchronizing running containers and config  Default   quot 1m quot   p    td    tr   tr  td  code fileCheckFrequency  code  br    a href  https   pkg go dev k8s io apimachinery pkg apis meta v1 Duration   code meta v1 Duration  code   a    td   td      p fileCheckFrequency is the duration between checking config files for new data  Default   quot 20s quot   p    td    tr   tr  td  code httpCheckFrequency  code  br    a href  https   pkg go dev k8s io apimachinery pkg apis meta v1 Duration   code meta v1 Duration  code   a    td   td      p httpCheckFrequency is the duration between checking http for new data  Default   quot 20s quot   p    td    tr   tr  td  code staticPodURL  code  br    code string  code    td   td      p staticPodURL is the URL for accessing static pods to run  Default   quot  quot   p    td    tr   tr  td  code staticPodURLHeader  code  br    code map string   string  code    td   td      p staticPodURLHeader is a map of slices with HTTP headers to use when accessing the podURL  Default  nil  p    td    tr   tr  td  code address  code  br    code string  code    td   td      p address is the IP address for the Kubelet to serve on  set to 0 0 0 0 for all interfaces   Default   quot 0 0 0 0 quot   p    td    tr   tr  td  code port  code  br    code int32  code    td   td      p port is the port for the Kubelet to serve on  The port number must be between 1 and 65535  inclusive  Default  10250  p    td    tr   tr  td  code readOnlyPort  code  br    code int32  code    td   td      p readOnlyPort is the read only port for the Kubelet to serve on with no authentication authorization  The port number must be between 1 and 65535  inclusive  Setting this field to 0 disables the read only service  Default  0  disabled   p    td    tr   tr  td  code tlsCertFile  code  br    code string  code    td   td      p tlsCertFile is the file containing x509 Certificate for HTTPS   CA cert  if any  concatenated after server cert   If tlsCertFile and tlsPrivateKeyFile are not provided  a self signed certificate and key are generated for the public address and saved to the directory passed to the Kubelet s   cert dir flag  Default   quot  quot   p    td    tr   tr  td  code tlsPrivateKeyFile  code  br    code string  code    td   td      p tlsPrivateKeyFile is the file containing x509 private key matching tlsCertFile  Default   quot  quot   p    td    tr   tr  td  code tlsCipherSuites  code  br    code   string  code    td   td      p tlsCipherSuites is the list of allowed cipher suites for the server  Note that TLS 1 3 ciphersuites are not configurable  Values are from tls package constants  https   golang org pkg crypto tls  pkg constants   Default  nil  p    td    tr   tr  td  code tlsMinVersion  code  br    code string  code    td   td      p tlsMinVersion is the minimum TLS version supported  Values are from tls package constants  https   golang org pkg crypto tls  pkg constants   Default   quot  quot   p    td    tr   tr  td  code rotateCertificates  code  br    code bool  code    td   td      p rotateCertificates enables client certificate rotation  The Kubelet will request a new certificate from the certificates k8s io API  This requires an approver to approve the certificate signing requests  Default  false  p    td    tr   tr  td  code serverTLSBootstrap  code  br    code bool  code    td   td      p serverTLSBootstrap enables server certificate bootstrap  Instead of self signing a serving certificate  the Kubelet will request a certificate from the  certificates k8s io  API  This requires an approver to approve the certificate signing requests  CSR   The RotateKubeletServerCertificate feature must be enabled when setting this field  Default  false  p    td    tr   tr  td  code authentication  code  br    a href   kubelet config k8s io v1beta1 KubeletAuthentication   code KubeletAuthentication  code   a    td   td      p authentication specifies how requests to the Kubelet s server are authenticated  Defaults  anonymous  enabled  false webhook  enabled  true cacheTTL   quot 2m quot   p    td    tr   tr  td  code authorization  code  br    a href   kubelet config k8s io v1beta1 KubeletAuthorization   code KubeletAuthorization  code   a    td   td      p authorization specifies how requests to the Kubelet s server are authorized  Defaults  mode  Webhook webhook  cacheAuthorizedTTL   quot 5m quot  cacheUnauthorizedTTL   quot 30s quot   p    td    tr   tr  td  code registryPullQPS  code  br    code int32  code    td   td      p registryPullQPS is the limit of registry pulls per second  The value must not be a negative number  Setting it to 0 means no limit  Default  5  p    td    tr   tr  td  code registryBurst  code  br    code int32  code    td   td      p registryBurst is the maximum size of bursty pulls  temporarily allows pulls to burst to this number  while still not exceeding registryPullQPS  The value must not be a negative number  Only used if registryPullQPS is greater than 0  Default  10  p    td    tr   tr  td  code eventRecordQPS  code  br    code int32  code    td   td      p eventRecordQPS is the maximum event creations per second  If 0  there is no limit enforced  The value cannot be a negative number  Default  50  p    td    tr   tr  td  code eventBurst  code  br    code int32  code    td   td      p eventBurst is the maximum size of a burst of event creations  temporarily allows event creations to burst to this number  while still not exceeding eventRecordQPS  This field canot be a negative number and it is only used when eventRecordQPS  gt  0  Default  100  p    td    tr   tr  td  code enableDebuggingHandlers  code  br    code bool  code    td   td      p enableDebuggingHandlers enables server endpoints for log access and local running of containers and commands  including the exec  attach  logs  and portforward features  Default  true  p    td    tr   tr  td  code enableContentionProfiling  code  br    code bool  code    td   td      p enableContentionProfiling enables block profiling  if enableDebuggingHandlers is true  Default  false  p    td    tr   tr  td  code healthzPort  code  br    code int32  code    td   td      p healthzPort is the port of the localhost healthz endpoint  set to 0 to disable   A valid number is between 1 and 65535  Default  10248  p    td    tr   tr  td  code healthzBindAddress  code  br    code string  code    td   td      p healthzBindAddress is the IP address for the healthz server to serve on  Default   quot 127 0 0 1 quot   p    td    tr   tr  td  code oomScoreAdj  code  br    code int32  code    td   td      p oomScoreAdj is The oom score adj value for kubelet process  Values must be within the range   1000  1000   Default   999  p    td    tr   tr  td  code clusterDomain  code  br    code string  code    td   td      p clusterDomain is the DNS domain for this cluster  If set  kubelet will configure all containers to search this domain in addition to the host s search domains  Default   quot  quot   p    td    tr   tr  td  code clusterDNS  code  br    code   string  code    td   td      p clusterDNS is a list of IP addresses for the cluster DNS server  If set  kubelet will configure all containers to use this for DNS resolution instead of the host s DNS servers  Default  nil  p    td    tr   tr  td  code streamingConnectionIdleTimeout  code  br    a href  https   pkg go dev k8s io apimachinery pkg apis meta v1 Duration   code meta v1 Duration  code   a    td   td      p streamingConnectionIdleTimeout is the maximum time a streaming connection can be idle before the connection is automatically closed  Default   quot 4h quot   p    td    tr   tr  td  code nodeStatusUpdateFrequency  code  br    a href  https   pkg go dev k8s io apimachinery pkg apis meta v1 Duration   code meta v1 Duration  code   a    td   td      p nodeStatusUpdateFrequency is the frequency that kubelet computes node status  If node lease feature is not enabled  it is also the frequency that kubelet posts node status to master  Note  When node lease feature is not enabled  be cautious when changing the constant  it must work with nodeMonitorGracePeriod in nodecontroller  Default   quot 10s quot   p    td    tr   tr  td  code nodeStatusReportFrequency  code  br    a href  https   pkg go dev k8s io apimachinery pkg apis meta v1 Duration   code meta v1 Duration  code   a    td   td      p nodeStatusReportFrequency is the frequency that kubelet posts node status to master if node status does not change  Kubelet will ignore this frequency and post node status immediately if any change is detected  It is only used when node lease feature is enabled  nodeStatusReportFrequency s default value is 5m  But if nodeStatusUpdateFrequency is set explicitly  nodeStatusReportFrequency s default value will be set to nodeStatusUpdateFrequency for backward compatibility  Default   quot 5m quot   p    td    tr   tr  td  code nodeLeaseDurationSeconds  code  br    code int32  code    td   td      p nodeLeaseDurationSeconds is the duration the Kubelet will set on its corresponding Lease  NodeLease provides an indicator of node health by having the Kubelet create and periodically renew a lease  named after the node  in the kube node lease namespace  If the lease expires  the node can be considered unhealthy  The lease is currently renewed every 10s  per KEP 0009  In the future  the lease renewal interval may be set based on the lease duration  The field value must be greater than 0  Default  40  p    td    tr   tr  td  code imageMinimumGCAge  code  br    a href  https   pkg go dev k8s io apimachinery pkg apis meta v1 Duration   code meta v1 Duration  code   a    td   td      p imageMinimumGCAge is the minimum age for an unused image before it is garbage collected  Default   quot 2m quot   p    td    tr   tr  td  code imageMaximumGCAge  code  br    a href  https   pkg go dev k8s io apimachinery pkg apis meta v1 Duration   code meta v1 Duration  code   a    td   td      p imageMaximumGCAge is the maximum age an image can be unused before it is garbage collected  The default of this field is  quot 0s quot   which disables this field  meaning images won t be garbage collected based on being unused for too long  Default   quot 0s quot   disabled   p    td    tr   tr  td  code imageGCHighThresholdPercent  code  br    code int32  code    td   td      p imageGCHighThresholdPercent is the percent of disk usage after which image garbage collection is always run  The percent is calculated by dividing this field value by 100  so this field must be between 0 and 100  inclusive  When specified  the value must be greater than imageGCLowThresholdPercent  Default  85  p    td    tr   tr  td  code imageGCLowThresholdPercent  code  br    code int32  code    td   td      p imageGCLowThresholdPercent is the percent of disk usage before which image garbage collection is never run  Lowest disk usage to garbage collect to  The percent is calculated by dividing this field value by 100  so the field value must be between 0 and 100  inclusive  When specified  the value must be less than imageGCHighThresholdPercent  Default  80  p    td    tr   tr  td  code volumeStatsAggPeriod  code  br    a href  https   pkg go dev k8s io apimachinery pkg apis meta v1 Duration   code meta v1 Duration  code   a    td   td      p volumeStatsAggPeriod is the frequency for calculating and caching volume disk usage for all pods  Default   quot 1m quot   p    td    tr   tr  td  code kubeletCgroups  code  br    code string  code    td   td      p kubeletCgroups is the absolute name of cgroups to isolate the kubelet in Default   quot  quot   p    td    tr   tr  td  code systemCgroups  code  br    code string  code    td   td      p systemCgroups is absolute name of cgroups in which to place all non kernel processes that are not already in a container  Empty for no container  Rolling back the flag requires a reboot  The cgroupRoot must be specified if this field is not empty  Default   quot  quot   p    td    tr   tr  td  code cgroupRoot  code  br    code string  code    td   td      p cgroupRoot is the root cgroup to use for pods  This is handled by the container runtime on a best effort basis   p    td    tr   tr  td  code cgroupsPerQOS  code  br    code bool  code    td   td      p cgroupsPerQOS enable QoS based CGroup hierarchy  top level CGroups for QoS classes and all Burstable and BestEffort Pods are brought up under their specific top level QoS CGroup  Default  true  p    td    tr   tr  td  code cgroupDriver  code  br    code string  code    td   td      p cgroupDriver is the driver kubelet uses to manipulate CGroups on the host  cgroupfs or systemd   Default   quot cgroupfs quot   p    td    tr   tr  td  code cpuManagerPolicy  code  br    code string  code    td   td      p cpuManagerPolicy is the name of the policy to use  Requires the CPUManager feature gate to be enabled  Default   quot None quot   p    td    tr   tr  td  code cpuManagerPolicyOptions  code  br    code map string string  code    td   td      p cpuManagerPolicyOptions is a set of key value which  allows to set extra options to fine tune the behaviour of the cpu manager policies  Requires  both the  quot CPUManager quot  and  quot CPUManagerPolicyOptions quot  feature gates to be enabled  Default  nil  p    td    tr   tr  td  code cpuManagerReconcilePeriod  code  br    a href  https   pkg go dev k8s io apimachinery pkg apis meta v1 Duration   code meta v1 Duration  code   a    td   td      p cpuManagerReconcilePeriod is the reconciliation period for the CPU Manager  Requires the CPUManager feature gate to be enabled  Default   quot 10s quot   p    td    tr   tr  td  code memoryManagerPolicy  code  br    code string  code    td   td      p memoryManagerPolicy is the name of the policy to use by memory manager  Requires the MemoryManager feature gate to be enabled  Default   quot none quot   p    td    tr   tr  td  code topologyManagerPolicy  code  br    code string  code    td   td      p topologyManagerPolicy is the name of the topology manager policy to use  Valid values include   p   ul   li  code restricted  code   kubelet only allows pods with optimal NUMA node alignment for requested resources   li   li  code best effort  code   kubelet will favor pods with NUMA alignment of CPU and device resources   li   li  code none  code   kubelet has no knowledge of NUMA alignment of a pod s CPU and device resources   li   li  code single numa node  code   kubelet only allows pods with a single NUMA alignment of CPU and device resources   li    ul   p Default   quot none quot   p    td    tr   tr  td  code topologyManagerScope  code  br    code string  code    td   td      p topologyManagerScope represents the scope of topology hint generation that topology manager requests and hint providers generate  Valid values include   p   ul   li  code container  code   topology policy is applied on a per container basis   li   li  code pod  code   topology policy is applied on a per pod basis   li    ul   p Default   quot container quot   p    td    tr   tr  td  code topologyManagerPolicyOptions  code  br    code map string string  code    td   td      p TopologyManagerPolicyOptions is a set of key value which allows to set extra options to fine tune the behaviour of the topology manager policies  Requires  both the  quot TopologyManager quot  and  quot TopologyManagerPolicyOptions quot  feature gates to be enabled  Default  nil  p    td    tr   tr  td  code qosReserved  code  br    code map string string  code    td   td      p qosReserved is a set of resource name to percentage pairs that specify the minimum percentage of a resource reserved for exclusive use by the guaranteed QoS tier  Currently supported resources   quot memory quot  Requires the QOSReserved feature gate to be enabled  Default  nil  p    td    tr   tr  td  code runtimeRequestTimeout  code  br    a href  https   pkg go dev k8s io apimachinery pkg apis meta v1 Duration   code meta v1 Duration  code   a    td   td      p runtimeRequestTimeout is the timeout for all runtime requests except long running requests   pull  logs  exec and attach  Default   quot 2m quot   p    td    tr   tr  td  code hairpinMode  code  br    code string  code    td   td      p hairpinMode specifies how the Kubelet should configure the container bridge for hairpin packets  Setting this flag allows endpoints in a Service to loadbalance back to themselves if they should try to access their own Service  Values   p   ul   li  quot promiscuous bridge quot   make the container bridge promiscuous   li   li  quot hairpin veth quot         set the hairpin flag on container veth interfaces   li   li  quot none quot                 do nothing   li    ul   p Generally  one must set  code   hairpin mode hairpin veth to  code  achieve hairpin NAT  because promiscuous bridge assumes the existence of a container bridge named cbr0  Default   quot promiscuous bridge quot   p    td    tr   tr  td  code maxPods  code  br    code int32  code    td   td      p maxPods is the maximum number of Pods that can run on this Kubelet  The value must be a non negative integer  Default  110  p    td    tr   tr  td  code podCIDR  code  br    code string  code    td   td      p podCIDR is the CIDR to use for pod IP addresses  only used in standalone mode  In cluster mode  this is obtained from the control plane  Default   quot  quot   p    td    tr   tr  td  code podPidsLimit  code  br    code int64  code    td   td      p podPidsLimit is the maximum number of PIDs in any pod  Default   1  p    td    tr   tr  td  code resolvConf  code  br    code string  code    td   td      p resolvConf is the resolver configuration file used as the basis for the container DNS resolution configuration  If set to the empty string  will override the default and effectively disable DNS lookups  Default   quot  etc resolv conf quot   p    td    tr   tr  td  code runOnce  code  br    code bool  code    td   td      p runOnce causes the Kubelet to check the API server once for pods  run those in addition to the pods specified by static pod files  and exit  Default  false  p    td    tr   tr  td  code cpuCFSQuota  code  br    code bool  code    td   td      p cpuCFSQuota enables CPU CFS quota enforcement for containers that specify CPU limits  Default  true  p    td    tr   tr  td  code cpuCFSQuotaPeriod  code  br    a href  https   pkg go dev k8s io apimachinery pkg apis meta v1 Duration   code meta v1 Duration  code   a    td   td      p cpuCFSQuotaPeriod is the CPU CFS quota period value   code cpu cfs period us  code   The value must be between 1 ms and 1 second  inclusive  Requires the CustomCPUCFSQuotaPeriod feature gate to be enabled  Default   quot 100ms quot   p    td    tr   tr  td  code nodeStatusMaxImages  code  br    code int32  code    td   td      p nodeStatusMaxImages caps the number of images reported in Node status images  The value must be greater than  2  Note  If  1 is specified  no cap will be applied  If 0 is specified  no image is returned  Default  50  p    td    tr   tr  td  code maxOpenFiles  code  br    code int64  code    td   td      p maxOpenFiles is Number of files that can be opened by Kubelet process  The value must be a non negative number  Default  1000000  p    td    tr   tr  td  code contentType  code  br    code string  code    td   td      p contentType is contentType of requests sent to apiserver  Default   quot application vnd kubernetes protobuf quot   p    td    tr   tr  td  code kubeAPIQPS  code  br    code int32  code    td   td      p kubeAPIQPS is the QPS to use while talking with kubernetes apiserver  Default  50  p    td    tr   tr  td  code kubeAPIBurst  code  br    code int32  code    td   td      p kubeAPIBurst is the burst to allow while talking with kubernetes API server  This field cannot be a negative number  Default  100  p    td    tr   tr  td  code serializeImagePulls  code  br    code bool  code    td   td      p serializeImagePulls when enabled  tells the Kubelet to pull images one at a time  We recommend  em not  em  changing the default value on nodes that run docker daemon with version   lt  1 9 or an Aufs storage backend  Issue  10959 has more details  Default  true  p    td    tr   tr  td  code maxParallelImagePulls  code  br    code int32  code    td   td      p MaxParallelImagePulls sets the maximum number of image pulls in parallel  This field cannot be set if SerializeImagePulls is true  Setting it to nil means no limit  Default  nil  p    td    tr   tr  td  code evictionHard  code  br    code map string string  code    td   td      p evictionHard is a map of signal names to quantities that defines hard eviction thresholds  For example   code   quot memory available quot    quot 300Mi quot    code   To explicitly disable  pass a 0  or 100  threshold on an arbitrary resource  Default  memory available    quot 100Mi quot  nodefs available    quot 10  quot  nodefs inodesFree   quot 5  quot  imagefs available   quot 15  quot   p    td    tr   tr  td  code evictionSoft  code  br    code map string string  code    td   td      p evictionSoft is a map of signal names to quantities that defines soft eviction thresholds  For example   code   quot memory available quot    quot 300Mi quot    code   Default  nil  p    td    tr   tr  td  code evictionSoftGracePeriod  code  br    code map string string  code    td   td      p evictionSoftGracePeriod is a map of signal names to quantities that defines grace periods for each soft eviction signal  For example   code   quot memory available quot    quot 30s quot    code   Default  nil  p    td    tr   tr  td  code evictionPressureTransitionPeriod  code  br    a href  https   pkg go dev k8s io apimachinery pkg apis meta v1 Duration   code meta v1 Duration  code   a    td   td      p evictionPressureTransitionPeriod is the duration for which the kubelet has to wait before transitioning out of an eviction pressure condition  Default   quot 5m quot   p    td    tr   tr  td  code evictionMaxPodGracePeriod  code  br    code int32  code    td   td      p evictionMaxPodGracePeriod is the maximum allowed grace period  in seconds  to use when terminating pods in response to a soft eviction threshold being met  This value effectively caps the Pod s terminationGracePeriodSeconds value during soft evictions  Note  Due to issue  64530  the behavior has a bug where this value currently just overrides the grace period during soft eviction  which can increase the grace period from what is set on the Pod  This bug will be fixed in a future release  Default  0  p    td    tr   tr  td  code evictionMinimumReclaim  code  br    code map string string  code    td   td      p evictionMinimumReclaim is a map of signal names to quantities that defines minimum reclaims  which describe the minimum amount of a given resource the kubelet will reclaim when performing a pod eviction while that resource is under pressure  For example   code   quot imagefs available quot    quot 2Gi quot    code   Default  nil  p    td    tr   tr  td  code podsPerCore  code  br    code int32  code    td   td      p podsPerCore is the maximum number of pods per core  Cannot exceed maxPods  The value must be a non negative integer  If 0  there is no limit on the number of Pods  Default  0  p    td    tr   tr  td  code enableControllerAttachDetach  code  br    code bool  code    td   td      p enableControllerAttachDetach enables the Attach Detach controller to manage attachment detachment of volumes scheduled to this node  and disables kubelet from executing any attach detach operations  Note  attaching detaching CSI volumes is not supported by the kubelet  so this option needs to be true for that use case  Default  true  p    td    tr   tr  td  code protectKernelDefaults  code  br    code bool  code    td   td      p protectKernelDefaults  if true  causes the Kubelet to error if kernel flags are not as it expects  Otherwise the Kubelet will attempt to modify kernel flags to match its expectation  Default  false  p    td    tr   tr  td  code makeIPTablesUtilChains  code  br    code bool  code    td   td      p makeIPTablesUtilChains  if true  causes the Kubelet to create the KUBE IPTABLES HINT chain in iptables as a hint to other components about the configuration of iptables on the system  Default  true  p    td    tr   tr  td  code iptablesMasqueradeBit  code  br    code int32  code    td   td      p iptablesMasqueradeBit formerly controlled the creation of the KUBE MARK MASQ chain  Deprecated  no longer has any effect  Default  14  p    td    tr   tr  td  code iptablesDropBit  code  br    code int32  code    td   td      p iptablesDropBit formerly controlled the creation of the KUBE MARK DROP chain  Deprecated  no longer has any effect  Default  15  p    td    tr   tr  td  code featureGates  code  br    code map string bool  code    td   td      p featureGates is a map of feature names to bools that enable or disable experimental features  This field modifies piecemeal the built in default values from  quot k8s io kubernetes pkg features kube features go quot   Default  nil  p    td    tr   tr  td  code failSwapOn  code  br    code bool  code    td   td      p failSwapOn tells the Kubelet to fail to start if swap is enabled on the node  Default  true  p    td    tr   tr  td  code memorySwap  code  br    a href   kubelet config k8s io v1beta1 MemorySwapConfiguration   code MemorySwapConfiguration  code   a    td   td      p memorySwap configures swap memory available to container workloads   p    td    tr   tr  td  code containerLogMaxSize  code  br    code string  code    td   td      p containerLogMaxSize is a quantity defining the maximum size of the container log file before it is rotated  For example   quot 5Mi quot  or  quot 256Ki quot   Default   quot 10Mi quot   p    td    tr   tr  td  code containerLogMaxFiles  code  br    code int32  code    td   td      p containerLogMaxFiles specifies the maximum number of container log files that can be present for a container  Default  5  p    td    tr   tr  td  code containerLogMaxWorkers  code  br    code int32  code    td   td      p ContainerLogMaxWorkers specifies the maximum number of concurrent workers to spawn for performing the log rotate operations  Set this count to 1 for disabling the concurrent log rotation workflows Default  1  p    td    tr   tr  td  code containerLogMonitorInterval  code  br    a href  https   pkg go dev k8s io apimachinery pkg apis meta v1 Duration   code meta v1 Duration  code   a    td   td      p ContainerLogMonitorInterval specifies the duration at which the container logs are monitored for performing the log rotate operation  This defaults to 10   time Seconds  But can be customized to a smaller value based on the log generation rate and the size required to be rotated against Default  10s  p    td    tr   tr  td  code configMapAndSecretChangeDetectionStrategy  code  br    a href   kubelet config k8s io v1beta1 ResourceChangeDetectionStrategy   code ResourceChangeDetectionStrategy  code   a    td   td      p configMapAndSecretChangeDetectionStrategy is a mode in which ConfigMap and Secret managers are running  Valid values include   p   ul   li  code Get  code   kubelet fetches necessary objects directly from the API server   li   li  code Cache  code   kubelet uses TTL cache for object fetched from the API server   li   li  code Watch  code   kubelet uses watches to observe changes to objects that are in its interest   li    ul   p Default   quot Watch quot   p    td    tr   tr  td  code systemReserved  code  br    code map string string  code    td   td      p systemReserved is a set of ResourceName ResourceQuantity  e g  cpu 200m memory 150G  pairs that describe resources reserved for non kubernetes components  Currently only cpu and memory are supported  See http   kubernetes io docs user guide compute resources for more detail  Default  nil  p    td    tr   tr  td  code kubeReserved  code  br    code map string string  code    td   td      p kubeReserved is a set of ResourceName ResourceQuantity  e g  cpu 200m memory 150G  pairs that describe resources reserved for kubernetes system components  Currently cpu  memory and local storage for root file system are supported  See https   kubernetes io docs concepts configuration manage resources containers  for more details  Default  nil  p    td    tr   tr  td  code reservedSystemCPUs  code   B  Required   B  br    code string  code    td   td      p The reservedSystemCPUs option specifies the CPU list reserved for the host level system threads and kubernetes related threads  This provide a  quot static quot  CPU list rather than the  quot dynamic quot  list by systemReserved and kubeReserved  This option does not support systemReservedCgroup or kubeReservedCgroup   p    td    tr   tr  td  code showHiddenMetricsForVersion  code  br    code string  code    td   td      p showHiddenMetricsForVersion is the previous version for which you want to show hidden metrics  Only the previous minor version is meaningful  other values will not be allowed  The format is  code  lt major gt   lt minor gt   code   e g    code 1 16  code   The purpose of this format is make sure you have the opportunity to notice if the next release hides additional metrics  rather than being surprised when they are permanently removed in the release after that  Default   quot  quot   p    td    tr   tr  td  code systemReservedCgroup  code  br    code string  code    td   td      p systemReservedCgroup helps the kubelet identify absolute name of top level CGroup used to enforce  code systemReserved  code  compute resource reservation for OS system daemons  Refer to  a href  https   kubernetes io docs tasks administer cluster reserve compute resources  node allocatable  Node Allocatable  a  doc for more information  Default   quot  quot   p    td    tr   tr  td  code kubeReservedCgroup  code  br    code string  code    td   td      p kubeReservedCgroup helps the kubelet identify absolute name of top level CGroup used to enforce  code KubeReserved  code  compute resource reservation for Kubernetes node system daemons  Refer to  a href  https   kubernetes io docs tasks administer cluster reserve compute resources  node allocatable  Node Allocatable  a  doc for more information  Default   quot  quot   p    td    tr   tr  td  code enforceNodeAllocatable  code  br    code   string  code    td   td      p This flag specifies the various Node Allocatable enforcements that Kubelet needs to perform  This flag accepts a list of options  Acceptable options are  code none  code    code pods  code    code system reserved  code  and  code kube reserved  code   If  code none  code  is specified  no other options may be specified  When  code system reserved  code  is in the list  systemReservedCgroup must be specified  When  code kube reserved  code  is in the list  kubeReservedCgroup must be specified  This field is supported only when  code cgroupsPerQOS  code  is set to true  Refer to  a href  https   kubernetes io docs tasks administer cluster reserve compute resources  node allocatable  Node Allocatable  a  for more information  Default    quot pods quot    p    td    tr   tr  td  code allowedUnsafeSysctls  code  br    code   string  code    td   td      p A comma separated whitelist of unsafe sysctls or sysctl patterns  ending in  code    code    Unsafe sysctl groups are  code kernel shm   code    code kernel msg   code    code kernel sem  code    code fs mqueue    code   and  code net    code   For example   quot  code kernel msg  net ipv4 route min pmtu  code  quot  Default      p    td    tr   tr  td  code volumePluginDir  code  br    code string  code    td   td      p volumePluginDir is the full path of the directory in which to search for additional third party volume plugins  Default   quot  usr libexec kubernetes kubelet plugins volume exec  quot   p    td    tr   tr  td  code providerID  code  br    code string  code    td   td      p providerID  if set  sets the unique ID of the instance that an external provider  i e  cloudprovider  can use to identify a specific node  Default   quot  quot   p    td    tr   tr  td  code kernelMemcgNotification  code  br    code bool  code    td   td      p kernelMemcgNotification  if set  instructs the kubelet to integrate with the kernel memcg notification for determining if memory eviction thresholds are exceeded rather than polling  Default  false  p    td    tr   tr  td  code logging  code   B  Required   B  br    a href   LoggingConfiguration   code LoggingConfiguration  code   a    td   td      p logging specifies the options of logging  Refer to  a href  https   github com kubernetes component base blob master logs options go  Logs Options  a  for more information  Default  Format  text  p    td    tr   tr  td  code enableSystemLogHandler  code  br    code bool  code    td   td      p enableSystemLogHandler enables system logs via web interface host port logs  Default  true  p    td    tr   tr  td  code enableSystemLogQuery  code  br    code bool  code    td   td      p enableSystemLogQuery enables the node log query feature on the  logs endpoint  EnableSystemLogHandler has to be enabled in addition for this feature to work  Default  false  p    td    tr   tr  td  code shutdownGracePeriod  code  br    a href  https   pkg go dev k8s io apimachinery pkg apis meta v1 Duration   code meta v1 Duration  code   a    td   td      p shutdownGracePeriod specifies the total duration that the node should delay the shutdown and total grace period for pod termination during a node shutdown  Default   quot 0s quot   p    td    tr   tr  td  code shutdownGracePeriodCriticalPods  code  br    a href  https   pkg go dev k8s io apimachinery pkg apis meta v1 Duration   code meta v1 Duration  code   a    td   td      p shutdownGracePeriodCriticalPods specifies the duration used to terminate critical pods during a node shutdown  This should be less than shutdownGracePeriod  For example  if shutdownGracePeriod 30s  and shutdownGracePeriodCriticalPods 10s  during a node shutdown the first 20 seconds would be reserved for gracefully terminating normal pods  and the last 10 seconds would be reserved for terminating critical pods  Default   quot 0s quot   p    td    tr   tr  td  code shutdownGracePeriodByPodPriority  code  br    a href   kubelet config k8s io v1beta1 ShutdownGracePeriodByPodPriority   code   ShutdownGracePeriodByPodPriority  code   a    td   td      p shutdownGracePeriodByPodPriority specifies the shutdown grace period for Pods based on their associated priority class value  When a shutdown request is received  the Kubelet will initiate shutdown on all pods running on the node with a grace period that depends on the priority of the pod  and then wait for all pods to exit  Each entry in the array represents the graceful shutdown time a pod with a priority class value that lies in the range of that value and the next higher entry in the list when the node is shutting down  For example  to allow critical pods 10s to shutdown  priority gt  10000 pods 20s to shutdown  and all remaining pods 30s to shutdown   p   p shutdownGracePeriodByPodPriority   p   ul   li priority  2000000000 shutdownGracePeriodSeconds  10  li   li priority  10000 shutdownGracePeriodSeconds  20  li   li priority  0 shutdownGracePeriodSeconds  30  li    ul   p The time the Kubelet will wait before exiting will at most be the maximum of all shutdownGracePeriodSeconds for each priority class range represented on the node  When all pods have exited or reached their grace periods  the Kubelet will release the shutdown inhibit lock  Requires the GracefulNodeShutdown feature gate to be enabled  This configuration must be empty if either ShutdownGracePeriod or ShutdownGracePeriodCriticalPods is set  Default  nil  p    td    tr   tr  td  code reservedMemory  code  br    a href   kubelet config k8s io v1beta1 MemoryReservation   code   MemoryReservation  code   a    td   td      p reservedMemory specifies a comma separated list of memory reservations for NUMA nodes  The parameter makes sense only in the context of the memory manager feature  The memory manager will not allocate reserved memory for container workloads  For example  if you have a NUMA0 with 10Gi of memory and the reservedMemory was specified to reserve 1Gi of memory at NUMA0  the memory manager will assume that only 9Gi is available for allocation  You can specify a different amount of NUMA node and memory types  You can omit this parameter at all  but you should be aware that the amount of reserved memory from all NUMA nodes should be equal to the amount of memory specified by the  a href  https   kubernetes io docs tasks administer cluster reserve compute resources  node allocatable  node allocatable  a   If at least one node allocatable parameter has a non zero value  you will need to specify at least one NUMA node  Also  avoid specifying   p   ol   li Duplicates  the same NUMA node  and memory type  but with a different value   li   li zero limits for any memory type   li   li NUMAs nodes IDs that do not exist under the machine   li   li memory types except for memory and hugepages      raw HTML omitted      li    ol   p Default  nil  p    td    tr   tr  td  code enableProfilingHandler  code  br    code bool  code    td   td      p enableProfilingHandler enables profiling via web interface host port debug pprof  Default  true  p    td    tr   tr  td  code enableDebugFlagsHandler  code  br    code bool  code    td   td      p enableDebugFlagsHandler enables flags endpoint via web interface host port debug flags v Default  true  p    td    tr   tr  td  code seccompDefault  code  br    code bool  code    td   td      p SeccompDefault enables the use of  code RuntimeDefault  code  as the default seccomp profile for all workloads  Default  false  p    td    tr   tr  td  code memoryThrottlingFactor  code  br    code float64  code    td   td      p MemoryThrottlingFactor specifies the factor multiplied by the memory limit or node allocatable memory when setting the cgroupv2 memory high value to enforce MemoryQoS  Decreasing this factor will set lower high limit for container cgroups and put heavier reclaim pressure while increasing will put less reclaim pressure  See https   kep k8s io 2570 for more details  Default  0 9  p    td    tr   tr  td  code registerWithTaints  code  br    a href  https   kubernetes io docs reference generated kubernetes api v1 31  taint v1 core   code   core v1 Taint  code   a    td   td      p registerWithTaints are an array of taints to add to a node object when the kubelet registers itself  This only takes effect when registerNode is true and upon the initial registration of the node  Default  nil  p    td    tr   tr  td  code registerNode  code  br    code bool  code    td   td      p registerNode enables automatic registration with the apiserver  Default  true  p    td    tr   tr  td  code tracing  code  br    a href   TracingConfiguration   code TracingConfiguration  code   a    td   td      p Tracing specifies the versioned configuration for OpenTelemetry tracing clients  See https   kep k8s io 2832 for more details  Default  nil  p    td    tr   tr  td  code localStorageCapacityIsolation  code  br    code bool  code    td   td      p LocalStorageCapacityIsolation enables local ephemeral storage isolation feature  The default setting is true  This feature allows users to set request limit for container s ephemeral storage and manage it in a similar way as cpu and memory  It also allows setting sizeLimit for emptyDir volume  which will trigger pod eviction if disk usage from the volume exceeds the limit  This feature depends on the capability of detecting correct root file system disk usage  For certain systems  such as kind rootless  if this capability cannot be supported  the feature LocalStorageCapacityIsolation should be disabled  Once disabled  user should not set request limit for container s ephemeral storage  or sizeLimit for emptyDir  Default  true  p    td    tr   tr  td  code containerRuntimeEndpoint  code   B  Required   B  br    code string  code    td   td      p ContainerRuntimeEndpoint is the endpoint of container runtime  Unix Domain Sockets are supported on Linux  while npipe and tcp endpoints are supported on Windows  Examples  unix    path to runtime sock    npipe       pipe runtime   p    td    tr   tr  td  code imageServiceEndpoint  code  br    code string  code    td   td      p ImageServiceEndpoint is the endpoint of container image service  Unix Domain Socket are supported on Linux  while npipe and tcp endpoints are supported on Windows  Examples  unix    path to runtime sock    npipe       pipe runtime   If not specified  the value in containerRuntimeEndpoint is used   p    td    tr   tr  td  code failCgroupV1  code  br    code bool  code    td   td      p FailCgroupV1 prevents the kubelet from starting on hosts that use cgroup v1  By default  this is set to  false   meaning the kubelet is allowed to start on cgroup v1 hosts unless this option is explicitly enabled  Default  false  p    td    tr    tbody    table       SerializedNodeConfigSource        kubelet config k8s io v1beta1 SerializedNodeConfigSource          p SerializedNodeConfigSource allows us to serialize v1 NodeConfigSource  This type is used internally by the Kubelet for tracking checkpointed dynamic configs  It exists in the kubeletconfig API group because it is classified as a versioned input to the Kubelet   p     table class  table    thead  tr  th width  30   Field  th  th Description  th   tr   thead   tbody        tr  td  code apiVersion  code  br  string  td  td  code kubelet config k8s io v1beta1  code   td   tr   tr  td  code kind  code  br  string  td  td  code SerializedNodeConfigSource  code   td   tr           tr  td  code source  code  br    a href  https   kubernetes io docs reference generated kubernetes api v1 31  nodeconfigsource v1 core   code core v1 NodeConfigSource  code   a    td   td      p source is the source that we are serializing   p    td    tr    tbody    table       CredentialProvider        kubelet config k8s io v1beta1 CredentialProvider          Appears in        CredentialProviderConfig   kubelet config k8s io v1beta1 CredentialProviderConfig     p CredentialProvider represents an exec plugin to be invoked by the kubelet  The plugin is only invoked when an image being pulled matches the images handled by the plugin  see matchImages    p     table class  table    thead  tr  th width  30   Field  th  th Description  th   tr   thead   tbody           tr  td  code name  code   B  Required   B  br    code string  code    td   td      p name is the required name of the credential provider  It must match the name of the provider executable as seen by the kubelet  The executable must be in the kubelet s bin directory  set by the   image credential provider bin dir flag    p    td    tr   tr  td  code matchImages  code   B  Required   B  br    code   string  code    td   td      p matchImages is a required list of strings used to match against images in order to determine if this provider should be invoked  If one of the strings matches the requested image from the kubelet  the plugin will be invoked and given a chance to provide credentials  Images are expected to contain the registry domain and URL path   p   p Each entry in matchImages is a pattern which can optionally contain a port and a path  Globs can be used in the domain  but not in the port or the path  Globs are supported as subdomains like   em  k8s io  or  k8s   em  io   and top level domains such as  k8s  em    Matching partial subdomains like  app  em  k8s io  is also supported  Each glob can only match a single subdomain segment  so   io does not match   k8s io   p   p A match exists between an image and a matchImage when all of the below are true   p   ul   li Both contain the same number of domain parts and each part matches   li   li The URL path of an imageMatch must be a prefix of the target image URL path   li   li If the imageMatch contains a port  then the port must match in the image as well   li    ul   p Example values of matchImages   p   ul   li 123456789 dkr ecr us east 1 amazonaws com  li   li   azurecr io  li   li gcr io  li   li  em    em  registry io  li   li registry io 8080 path  li    ul    td    tr   tr  td  code defaultCacheDuration  code   B  Required   B  br    a href  https   pkg go dev k8s io apimachinery pkg apis meta v1 Duration   code meta v1 Duration  code   a    td   td      p defaultCacheDuration is the default duration the plugin will cache credentials in memory if a cache duration is not provided in the plugin response  This field is required   p    td    tr   tr  td  code apiVersion  code   B  Required   B  br    code string  code    td   td      p Required input version of the exec CredentialProviderRequest  The returned CredentialProviderResponse MUST use the same encoding version as the input  Current supported values are   p   ul   li credentialprovider kubelet k8s io v1beta1  li    ul    td    tr   tr  td  code args  code  br    code   string  code    td   td      p Arguments to pass to the command when executing it   p    td    tr   tr  td  code env  code  br    a href   kubelet config k8s io v1beta1 ExecEnvVar   code   ExecEnvVar  code   a    td   td      p Env defines additional environment variables to expose to the process  These are unioned with the host s environment  as well as variables client go uses to pass argument to the plugin   p    td    tr    tbody    table       ExecEnvVar        kubelet config k8s io v1beta1 ExecEnvVar          Appears in        CredentialProvider   kubelet config k8s io v1beta1 CredentialProvider     p ExecEnvVar is used for setting environment variables when executing an exec based credential plugin   p     table class  table    thead  tr  th width  30   Field  th  th Description  th   tr   thead   tbody           tr  td  code name  code   B  Required   B  br    code string  code    td   td      span class  text muted  No description provided   span   td    tr   tr  td  code value  code   B  Required   B  br    code string  code    td   td      span class  text muted  No description provided   span   td    tr    tbody    table       KubeletAnonymousAuthentication        kubelet config k8s io v1beta1 KubeletAnonymousAuthentication          Appears in        KubeletAuthentication   kubelet config k8s io v1beta1 KubeletAuthentication      table class  table    thead  tr  th width  30   Field  th  th Description  th   tr   thead   tbody           tr  td  code enabled  code  br    code bool  code    td   td      p enabled allows anonymous requests to the kubelet server  Requests that are not rejected by another authentication method are treated as anonymous requests  Anonymous requests have a username of  code system anonymous  code   and a group name of  code system unauthenticated  code    p    td    tr    tbody    table       KubeletAuthentication        kubelet config k8s io v1beta1 KubeletAuthentication          Appears in        KubeletConfiguration   kubelet config k8s io v1beta1 KubeletConfiguration      table class  table    thead  tr  th width  30   Field  th  th Description  th   tr   thead   tbody           tr  td  code x509  code  br    a href   kubelet config k8s io v1beta1 KubeletX509Authentication   code KubeletX509Authentication  code   a    td   td      p x509 contains settings related to x509 client certificate authentication   p    td    tr   tr  td  code webhook  code  br    a href   kubelet config k8s io v1beta1 KubeletWebhookAuthentication   code KubeletWebhookAuthentication  code   a    td   td      p webhook contains settings related to webhook bearer token authentication   p    td    tr   tr  td  code anonymous  code  br    a href   kubelet config k8s io v1beta1 KubeletAnonymousAuthentication   code KubeletAnonymousAuthentication  code   a    td   td      p anonymous contains settings related to anonymous authentication   p    td    tr    tbody    table       KubeletAuthorization        kubelet config k8s io v1beta1 KubeletAuthorization          Appears in        KubeletConfiguration   kubelet config k8s io v1beta1 KubeletConfiguration      table class  table    thead  tr  th width  30   Field  th  th Description  th   tr   thead   tbody           tr  td  code mode  code  br    a href   kubelet config k8s io v1beta1 KubeletAuthorizationMode   code KubeletAuthorizationMode  code   a    td   td      p mode is the authorization mode to apply to requests to the kubelet server  Valid values are  code AlwaysAllow  code  and  code Webhook  code   Webhook mode uses the SubjectAccessReview API to determine authorization   p    td    tr   tr  td  code webhook  code  br    a href   kubelet config k8s io v1beta1 KubeletWebhookAuthorization   code KubeletWebhookAuthorization  code   a    td   td      p webhook contains settings related to Webhook authorization   p    td    tr    tbody    table       KubeletAuthorizationMode        kubelet config k8s io v1beta1 KubeletAuthorizationMode        Alias of  string      Appears in        KubeletAuthorization   kubelet config k8s io v1beta1 KubeletAuthorization           KubeletWebhookAuthentication        kubelet config k8s io v1beta1 KubeletWebhookAuthentication          Appears in        KubeletAuthentication   kubelet config k8s io v1beta1 KubeletAuthentication      table class  table    thead  tr  th width  30   Field  th  th Description  th   tr   thead   tbody           tr  td  code enabled  code  br    code bool  code    td   td      p enabled allows bearer token authentication backed by the tokenreviews authentication k8s io API   p    td    tr   tr  td  code cacheTTL  code  br    a href  https   pkg go dev k8s io apimachinery pkg apis meta v1 Duration   code meta v1 Duration  code   a    td   td      p cacheTTL enables caching of authentication results  p    td    tr    tbody    table       KubeletWebhookAuthorization        kubelet config k8s io v1beta1 KubeletWebhookAuthorization          Appears in        KubeletAuthorization   kubelet config k8s io v1beta1 KubeletAuthorization      table class  table    thead  tr  th width  30   Field  th  th Description  th   tr   thead   tbody           tr  td  code cacheAuthorizedTTL  code  br    a href  https   pkg go dev k8s io apimachinery pkg apis meta v1 Duration   code meta v1 Duration  code   a    td   td      p cacheAuthorizedTTL is the duration to cache  authorized  responses from the webhook authorizer   p    td    tr   tr  td  code cacheUnauthorizedTTL  code  br    a href  https   pkg go dev k8s io apimachinery pkg apis meta v1 Duration   code meta v1 Duration  code   a    td   td      p cacheUnauthorizedTTL is the duration to cache  unauthorized  responses from the webhook authorizer   p    td    tr    tbody    table       KubeletX509Authentication        kubelet config k8s io v1beta1 KubeletX509Authentication          Appears in        KubeletAuthentication   kubelet config k8s io v1beta1 KubeletAuthentication      table class  table    thead  tr  th width  30   Field  th  th Description  th   tr   thead   tbody           tr  td  code clientCAFile  code  br    code string  code    td   td      p clientCAFile is the path to a PEM encoded certificate bundle  If set  any request presenting a client certificate signed by one of the authorities in the bundle is authenticated with a username corresponding to the CommonName  and groups corresponding to the Organization in the client certificate   p    td    tr    tbody    table       MemoryReservation        kubelet config k8s io v1beta1 MemoryReservation          Appears in        KubeletConfiguration   kubelet config k8s io v1beta1 KubeletConfiguration     p MemoryReservation specifies the memory reservation of different types for each NUMA node  p     table class  table    thead  tr  th width  30   Field  th  th Description  th   tr   thead   tbody           tr  td  code numaNode  code   B  Required   B  br    code int32  code    td   td      span class  text muted  No description provided   span   td    tr   tr  td  code limits  code   B  Required   B  br    a href  https   kubernetes io docs reference generated kubernetes api v1 31  resourcelist v1 core   code core v1 ResourceList  code   a    td   td      span class  text muted  No description provided   span   td    tr    tbody    table       MemorySwapConfiguration        kubelet config k8s io v1beta1 MemorySwapConfiguration          Appears in        KubeletConfiguration   kubelet config k8s io v1beta1 KubeletConfiguration      table class  table    thead  tr  th width  30   Field  th  th Description  th   tr   thead   tbody           tr  td  code swapBehavior  code  br    code string  code    td   td      p swapBehavior configures swap memory available to container workloads  May be one of  quot  quot    quot NoSwap quot   workloads can not use swap  default option   quot LimitedSwap quot   workload swap usage is limited  The swap limit is proportionate to the container s memory request   p    td    tr    tbody    table       ResourceChangeDetectionStrategy        kubelet config k8s io v1beta1 ResourceChangeDetectionStrategy        Alias of  string      Appears in        KubeletConfiguration   kubelet config k8s io v1beta1 KubeletConfiguration     p ResourceChangeDetectionStrategy denotes a mode in which internal managers  secret  configmap  are discovering object changes   p          ShutdownGracePeriodByPodPriority        kubelet config k8s io v1beta1 ShutdownGracePeriodByPodPriority          Appears in        KubeletConfiguration   kubelet config k8s io v1beta1 KubeletConfiguration     p ShutdownGracePeriodByPodPriority specifies the shutdown grace period for Pods based on their associated priority class value  p     table class  table    thead  tr  th width  30   Field  th  th Description  th   tr   thead   tbody           tr  td  code priority  code   B  Required   B  br    code int32  code    td   td      p priority is the priority value associated with the shutdown grace period  p    td    tr   tr  td  code shutdownGracePeriodSeconds  code   B  Required   B  br    code int64  code    td   td      p shutdownGracePeriodSeconds is the shutdown grace period in seconds  p    td    tr    tbody    table