diff --git a/content/zh-cn/docs/reference/command-line-tools-reference/kube-controller-manager.md b/content/zh-cn/docs/reference/command-line-tools-reference/kube-controller-manager.md index 28b5e6370ffaf..e8217c7eba27e 100644 --- a/content/zh-cn/docs/reference/command-line-tools-reference/kube-controller-manager.md +++ b/content/zh-cn/docs/reference/command-line-tools-reference/kube-controller-manager.md @@ -3,6 +3,13 @@ title: kube-controller-manager content_type: tool-reference weight: 30 --- + ## {{% heading "synopsis" %}} @@ -72,8 +79,10 @@ metric2,label='v1,v2,v3'。

-包含允许列表映射的清单文件的路径。此文件的格式与 --allow-metric-labels 标志相同。 +包含允许列表映射的清单文件的路径。此文件的格式与 --allow-metric-labels 标志相同,即 +
allowListMapping:
"metric1,label1": "value11,value12"
"metric2,label2": ""
请注意,--allow-metric-labels 标志将覆盖此清单文件。

@@ -625,6 +634,19 @@ The number of resource quotas that are allowed to sync concurrently. Larger numb + +--concurrent-resourceclaim-syncs int32     默认值:50 + + + +

+ +允许并发执行的操作数量(创建或删除 ResourceClaim)。数值越大,响应越快,但会带来更高的 CPU(以及网络)负载。 +

+ + --concurrent-service-endpoint-syncs int32     默认值:5 @@ -756,7 +778,7 @@ Interval between starting controller managers.

要启用的控制器列表。* 表示启用所有默认启用的控制器; foo 启用名为 foo 的控制器; @@ -770,14 +792,14 @@ horizontal-pod-autoscaler-controller、job-controller、kube-apiserver-serving-c legacy-serviceaccount-token-cleaner-controller、namespace-controller、node-ipam-controller、node-lifecycle-controller、 node-route-controller、persistentvolume-attach-detach-controller、persistentvolume-binder-controller、 persistentvolume-expander-controller、persistentvolume-protection-controller、persistentvolumeclaim-protection-controller、 -pod-garbage-collector-controller、podcertificaterequest-cleaner-controller、replicaset-controller、 -replicationcontroller-controller、resourceclaim-controller、resourcequota-controller、 -root-ca-certificate-publisher-controller、selinux-warning-controller、service-cidr-controller、 +pod-garbage-collector-controller、podcertificaterequest-cleaner-controller、podgroup-protection-controller、 +replicaset-controller、replicationcontroller-controller、resourceclaim-controller、resourcepoolstatusrequest-controller、 +resourcequota-controller、root-ca-certificate-publisher-controller、selinux-warning-controller、service-cidr-controller、 service-lb-controller、serviceaccount-controller、serviceaccount-token-controller、statefulset-controller、 storage-version-migrator-controller、storageversion-garbage-collector-controller、taint-eviction-controller、 -token-cleaner-controller、ttl-after-finished-controller、ttl-controller、 -validatingadmissionpolicy-status-controller、volumeattributesclass-protection-controller
-默认禁用的控制器有: bootstrap-signer-controller、selinux-warning-controller、token-cleaner-controller +token-cleaner-controller、ttl-after-finished-controller、ttl-controller、validatingadmissionpolicy-status-controller、 +volumeattributesclass-protection-controller
+默认禁用的控制器有:bootstrap-signer-controller、selinux-warning-controller、token-cleaner-controller

@@ -842,12 +864,12 @@ This flag provides an escape hatch for misbehaving metrics. You must provide the

不同组件所模拟的能力(API、特性等)的版本。
如果设置了该选项,组件将模拟此版本的行为,而不是下层可执行文件版本的行为。
版本格式只能是 major.minor,例如 “--emulated-version=wardle=1.2,kube=1.31”。 -选项包括:
kube=1.32..1.35(默认 1.35)。如果组件未被指定,默认为 “kube”。 +选项包括:
kube=1.33..1.36(默认 1.36)。如果组件未被指定,默认为 “kube”。

@@ -952,8 +974,7 @@ The plugin to use when cloud provider is set to external. Can be empty, should o

逗号分隔的组件列表,这些 key=value 对用来描述不同组件测试性/试验性特性的特性门控。
如果组件未被指定,默认值为“kube”。此标志可以被重复调用。例如: @@ -1107,49 +1137,53 @@ kube:AllAlpha=true|false (ALPHA - 默认值=false)
kube:AllBeta=true|false (BETA - 默认值=false)
kube:AllowParsingUserUIDFromCertAuth=true|false (BETA - 默认值=true)
kube:AllowUnsafeMalformedObjectDeletion=true|false (ALPHA - 默认值=false)
+kube:AtomicFIFO=true|false (BETA - 默认值=true)
kube:AuthorizePodWebsocketUpgradeCreatePermission=true|false (BETA - 默认值=true)
kube:CBORServingAndStorage=true|false (ALPHA - 默认值=false)
kube:CPUManagerPolicyAlphaOptions=true|false (ALPHA - 默认值=false)
kube:CPUManagerPolicyBetaOptions=true|false (BETA - 默认值=true)
-kube:CRDObservedGenerationTracking=true|false (BETA - 默认值=false)
-kube:CSIServiceAccountTokenSecrets=true|false (BETA - 默认值=true)
+kube:CRDObservedGenerationTracking=true|false (BETA - 默认值=true)
+kube:CRIListStreaming=true|false (ALPHA - 默认值=false)
kube:CSIVolumeHealth=true|false (ALPHA - 默认值=false)
kube:ClearingNominatedNodeNameAfterBinding=true|false (BETA - 默认值=true)
+kube:ClientsAllowCARotation=true|false (BETA - 默认值=true)
kube:ClientsAllowCBOR=true|false (ALPHA - 默认值=false)
+kube:ClientsAllowTLSCacheGC=true|false (BETA - 默认值=true)
kube:ClientsPreferCBOR=true|false (ALPHA - 默认值=false)
kube:CloudControllerManagerWatchBasedRoutesReconciliation=true|false (ALPHA - 默认值=false)
kube:CloudControllerManagerWebhook=true|false (ALPHA - 默认值=false)
kube:ClusterTrustBundle=true|false (BETA - 默认值=false)
kube:ClusterTrustBundleProjection=true|false (BETA - 默认值=false)
-kube:ComponentFlagz=true|false (ALPHA - 默认值=false)
-kube:ComponentStatusz=true|false (ALPHA - 默认值=false)
+kube:ComponentFlagz=true|false (BETA - 默认值=true)
+kube:ComponentStatusz=true|false (BETA - 默认值=true)
kube:ConcurrentWatchObjectDecode=true|false (BETA - 默认值=false)
-kube:ConstrainedImpersonation=true|false (ALPHA - 默认值=false)
+kube:ConstrainedImpersonation=true|false (BETA - 默认值=true)
kube:ContainerCheckpoint=true|false (BETA - 默认值=true)
kube:ContainerRestartRules=true|false (BETA - 默认值=true)
kube:ContainerStopSignals=true|false (ALPHA - 默认值=false)
kube:ContextualLogging=true|false (BETA - 默认值=true)
+kube:ControllerManagerReleaseLeaderElectionLockOnExit=true|false (ALPHA - 默认值=false)
kube:CoordinatedLeaderElection=true|false (BETA - 默认值=false)
kube:CrossNamespaceVolumeDataSource=true|false (ALPHA - 默认值=false)
-kube:CustomCPUCFSQuotaPeriod=true|false (ALPHA - 默认值=false)
-kube:DRAAdminAccess=true|false (BETA - 默认值=true)
-kube:DRAConsumableCapacity=true|false (ALPHA - 默认值=false)
-kube:DRADeviceBindingConditions=true|false (ALPHA - 默认值=false)
-kube:DRADeviceTaintRules=true|false (ALPHA - 默认值=false)
-kube:DRADeviceTaints=true|false (ALPHA - 默认值=false)
-kube:DRAExtendedResource=true|false (ALPHA - 默认值=false)
-kube:DRAPartitionableDevices=true|false (ALPHA - 默认值=false)
-kube:DRAPrioritizedList=true|false (BETA - 默认值=true)
+kube:DRAConsumableCapacity=true|false (BETA - 默认值=true)
+kube:DRADeviceBindingConditions=true|false (BETA - 默认值=true)
+kube:DRADeviceTaintRules=true|false (BETA - 默认值=false)
+kube:DRADeviceTaints=true|false (BETA - 默认值=true)
+kube:DRAExtendedResource=true|false (BETA - 默认值=true)
+kube:DRAListTypeAttributes=true|false (ALPHA - 默认值=false)
+kube:DRANodeAllocatableResources=true|false (ALPHA - 默认值=false)
+kube:DRAPartitionableDevices=true|false (BETA - 默认值=true)
kube:DRAResourceClaimDeviceStatus=true|false (BETA - 默认值=true)
+kube:DRAResourceClaimGranularStatusAuthorization=true|false (BETA - 默认值=true)
+kube:DRAResourcePoolStatus=true|false (ALPHA - 默认值=false)
kube:DRASchedulerFilterTimeout=true|false (BETA - 默认值=true)
-kube:DeclarativeValidation=true|false (BETA - 默认值=true)
-kube:DeclarativeValidationTakeover=true|false (BETA - 默认值=false)
+kube:DRAWorkloadResourceClaims=true|false (ALPHA - 默认值=false)
+kube:DeclarativeValidationBeta=true|false (BETA - 默认值=true)
kube:DeploymentReplicaSetTerminatingReplicas=true|false (BETA - 默认值=true)
kube:DetectCacheInconsistency=true|false (BETA - 默认值=true)
-kube:DisableCPUQuotaWithExclusiveCPUs=true|false (BETA - 默认值=true)
kube:EnvFiles=true|false (BETA - 默认值=true)
kube:EventedPLEG=true|false (ALPHA - 默认值=false)
-kube:ExternalServiceAccountTokenSigner=true|false (BETA - 默认值=true)
+kube:ExtendWebSocketsToKubelet=true|false (BETA - 默认值=true)
kube:GangScheduling=true|false (ALPHA - 默认值=false)
kube:GenericWorkload=true|false (ALPHA - 默认值=false)
kube:GracefulNodeShutdown=true|false (BETA - 默认值=true)
@@ -1157,90 +1191,95 @@ kube:GracefulNodeShutdownBasedOnPodPriority=true|false (BETA - 默认值=true) kube:HPAScaleToZero=true|false (ALPHA - 默认值=false)
kube:HostnameOverride=true|false (BETA - 默认值=true)
-kube:ImageVolume=true|false (BETA - 默认值=true)
-kube:InOrderInformers=true|false (BETA - 默认值=true)
+kube:ImageVolumeWithDigest=true|false (ALPHA - 默认值=false)
kube:InOrderInformersBatchProcess=true|false (BETA - 默认值=true)
-kube:InPlacePodLevelResourcesVerticalScaling=true|false (ALPHA - 默认值=false)
+kube:InPlacePodLevelResourcesVerticalScaling=true|false (BETA - 默认值=true)
kube:InPlacePodVerticalScalingExclusiveCPUs=true|false (ALPHA - 默认值=false)
kube:InPlacePodVerticalScalingExclusiveMemory=true|false (ALPHA - 默认值=false)
-kube:InTreePluginPortworxUnregister=true|false (ALPHA - 默认值=false)
+kube:InPlacePodVerticalScalingInitContainers=true|false (BETA - 默认值=true)
kube:KubeletCrashLoopBackOffMax=true|false (BETA - 默认值=true)
kube:KubeletEnsureSecretPulledImages=true|false (BETA - 默认值=true)
-kube:KubeletFineGrainedAuthz=true|false (BETA - 默认值=true)
kube:KubeletInUserNamespace=true|false (ALPHA - 默认值=false)
-kube:KubeletPSI=true|false (BETA - 默认值=true)
-kube:KubeletPodResourcesDynamicResources=true|false (BETA - 默认值=true)
-kube:KubeletPodResourcesGet=true|false (BETA - 默认值=true)
kube:KubeletSeparateDiskGC=true|false (BETA - 默认值=true)
kube:KubeletServiceAccountTokenForCredentialProviders=true|false (BETA - 默认值=true)
kube:ListFromCacheSnapshot=true|false (BETA - 默认值=true)
kube:LocalStorageCapacityIsolationFSQuotaMonitoring=true|false (BETA - 默认值=false)
kube:LoggingAlphaOptions=true|false (ALPHA - 默认值=false)
kube:LoggingBetaOptions=true|false (BETA - 默认值=true)
+kube:ManifestBasedAdmissionControlConfig=true|false (ALPHA - 默认值=false)
kube:MatchLabelKeysInPodTopologySpread=true|false (BETA - 默认值=true)
kube:MatchLabelKeysInPodTopologySpreadSelectorMerge=true|false (BETA - 默认值=true)
-kube:MaxUnavailableStatefulSet=true|false (BETA - 默认值=true)
+kube:MaxUnavailableStatefulSet=true|false (BETA - 默认值=false)
kube:MemoryQoS=true|false (ALPHA - 默认值=false)
-kube:MutableCSINodeAllocatableCount=true|false (BETA - 默认值=true)
kube:MutablePVNodeAffinity=true|false (ALPHA - 默认值=false)
-kube:MutablePodResourcesForSuspendedJobs=true|false (ALPHA - 默认值=false)
-kube:MutableSchedulingDirectivesForSuspendedJobs=true|false (ALPHA - 默认值=false)
-kube:MutatingAdmissionPolicy=true|false (BETA - 默认值=false)
-kube:NodeDeclaredFeatures=true|false (ALPHA - 默认值=false)
-kube:NodeLogQuery=true|false (BETA - 默认值=false)
+kube:MutablePodResourcesForSuspendedJobs=true|false (BETA - 默认值=true)
+kube:MutableSchedulingDirectivesForSuspendedJobs=true|false (BETA - 默认值=true)
+kube:NativeHistograms=true|false (ALPHA - 默认值=false)
+kube:NodeDeclaredFeatures=true|false (BETA - 默认值=true)
kube:NominatedNodeNameForExpectation=true|false (BETA - 默认值=true)
kube:OpenAPIEnums=true|false (BETA - 默认值=true)
kube:OpportunisticBatching=true|false (BETA - 默认值=true)
+kube:PLEGOnDemandRelist=true|false (BETA - 默认值=true)
+kube:PersistentVolumeClaimUnusedSinceTime=true|false (ALPHA - 默认值=false)
kube:PodAndContainerStatsFromCRI=true|false (ALPHA - 默认值=false)
kube:PodCertificateRequest=true|false (BETA - 默认值=false)
kube:PodDeletionCost=true|false (BETA - 默认值=true)
+kube:PodLevelResourceManagers=true|false (ALPHA - 默认值=false)
kube:PodLevelResources=true|false (BETA - 默认值=true)
kube:PodLogsQuerySplitStreams=true|false (ALPHA - 默认值=false)
kube:PodReadyToStartContainersCondition=true|false (BETA - 默认值=true)
kube:PodTopologyLabelsAdmission=true|false (BETA - 默认值=true)
+kube:PodsAPI=true|false (ALPHA - 默认值=false)
kube:PortForwardWebsockets=true|false (BETA - 默认值=true)
kube:PreventStaticPodAPIReferences=true|false (BETA - 默认值=true)
-kube:ProcMountType=true|false (BETA - 默认值=true)
kube:QOSReserved=true|false (ALPHA - 默认值=false)
kube:ReduceDefaultCrashLoopBackOffDecay=true|false (ALPHA - 默认值=false)
-kube:RelaxedServiceNameValidation=true|false (ALPHA - 默认值=false)
+kube:RelaxedServiceNameValidation=true|false (BETA - 默认值=true)
+kube:ReloadKubeletClientCAFile=true|false (BETA - 默认值=true)
kube:ReloadKubeletServerCertificateFile=true|false (BETA - 默认值=true)
kube:RemoteRequestHeaderUID=true|false (BETA - 默认值=true)
-kube:ResourceHealthStatus=true|false (ALPHA - 默认值=false)
-kube:RestartAllContainersOnContainerExits=true|false (ALPHA - 默认值=false)
+kube:ResourceHealthStatus=true|false (BETA - 默认值=true)
+kube:ResourceHealthStatusMessage=true|false (BETA - 默认值=true)
+kube:RestartAllContainersOnContainerExits=true|false (BETA - 默认值=true)
kube:RotateKubeletServerCertificate=true|false (BETA - 默认值=true)
kube:RuntimeClassInImageCriApi=true|false (ALPHA - 默认值=false)
-kube:SELinuxChangePolicy=true|false (BETA - 默认值=true)
kube:SELinuxMount=true|false (BETA - 默认值=false)
-kube:SELinuxMountReadWriteOncePod=true|false (BETA - 默认值=true)
-kube:SchedulerAsyncAPICalls=true|false (BETA - 默认值=true)
+kube:SchedulerAsyncAPICalls=true|false (BETA - 默认值=false)
kube:SchedulerAsyncPreemption=true|false (BETA - 默认值=true)
kube:SchedulerPopFromBackoffQ=true|false (BETA - 默认值=true)
kube:ServiceAccountNodeAudienceRestriction=true|false (BETA - 默认值=true)
+kube:ShardedListAndWatch=true|false (ALPHA - 默认值=false)
kube:SizeBasedListCostEstimate=true|false (BETA - 默认值=true)
+kube:StaleControllerConsistencyDaemonSet=true|false (BETA - 默认值=true)
+kube:StaleControllerConsistencyJob=true|false (BETA - 默认值=true)
+kube:StaleControllerConsistencyReplicaSet=true|false (BETA - 默认值=true)
+kube:StaleControllerConsistencyStatefulSet=true|false (BETA - 默认值=true)
kube:StatefulSetSemanticRevisionComparison=true|false (BETA - 默认值=true)
kube:StorageCapacityScoring=true|false (ALPHA - 默认值=false)
kube:StorageVersionAPI=true|false (ALPHA - 默认值=false)
kube:StorageVersionHash=true|false (BETA - 默认值=true)
kube:StorageVersionMigrator=true|false (BETA - 默认值=false)
-kube:StrictIPCIDRValidation=true|false (ALPHA - 默认值=false)
+kube:StrictIPCIDRValidation=true|false (BETA - 默认值=true)
kube:StructuredAuthenticationConfigurationEgressSelector=true|false (BETA - 默认值=true)
kube:StructuredAuthenticationConfigurationJWKSMetrics=true|false (BETA - 默认值=true)
kube:TaintTolerationComparisonOperators=true|false (ALPHA - 默认值=false)
kube:TokenRequestServiceAccountUIDValidation=true|false (BETA - 默认值=true)
+kube:TopologyAwareWorkloadScheduling=true|false (ALPHA - 默认值=false)
kube:TopologyManagerPolicyAlphaOptions=true|false (ALPHA - 默认值=false)
kube:TopologyManagerPolicyBetaOptions=true|false (BETA - 默认值=true)
kube:TranslateStreamCloseWebsocketRequests=true|false (BETA - 默认值=true)
kube:UnauthenticatedHTTP2DOSMitigation=true|false (BETA - 默认值=true)
-kube:UnknownVersionInteroperabilityProxy=true|false (ALPHA - 默认值=false)
+kube:UnknownVersionInteroperabilityProxy=true|false (BETA - 默认值=true)
+kube:UnlockWhileProcessingFIFO=true|false (BETA - 默认值=true)
kube:UserNamespacesHostNetworkSupport=true|false (ALPHA - 默认值=false)
-kube:UserNamespacesSupport=true|false (BETA - 默认值=true)
kube:VolumeLimitScaling=true|false (ALPHA - 默认值=false)
-kube:WatchCacheInitializationPostStartHook=true|false (BETA - 默认值=false)
+kube:WatchCacheInitializationPostStartHook=true|false (BETA - 默认值=true)
kube:WatchList=true|false (BETA - 默认值=true)
kube:WatchListClient=true|false (BETA - 默认值=true)
kube:WindowsCPUAndMemoryAffinity=true|false (ALPHA - 默认值=false)
-kube:WindowsGracefulNodeShutdown=true|false (BETA - 默认值=true) +kube:WindowsGracefulNodeShutdown=true|false (BETA - 默认值=true)
+kube:WorkloadAwarePreemption=true|false (ALPHA - 默认值=false)
+kube:WorkloadWithJob=true|false (ALPHA - 默认值=false)

@@ -1621,11 +1660,11 @@ The maximum number of endpoints that will be added to an EndpointSlice. More end

服务器应兼容的控制平面组件的最低版本。
必须小于或等于模拟版本。版本格式只能是 major.minor,例如:'--min-compatibility-version=wardle=1.2,kube=1.31'。
-选项包括:kube=1.32..1.35(默认值:1.35)
+选项包括:kube=1.33..1.36(默认值:1.35)
如果组件未被指定,默认为 “kube”。

@@ -2152,6 +2191,20 @@ TLS_RSA_WITH_RC4_128_SHA。 + +--tls-curve-preferences int32Slice     默认值:[] + + +

+ +以逗号分隔的 Go crypto/tls CurveID 数值列表,作为服务器允许的密钥交换机制。 +支持的取值取决于所使用的 Go 版本。每个 Go 版本支持的值可参考:https://pkg.go.dev/crypto/tls#CurveID。 +列表中的顺序会被忽略,Go 会根据内部优先级从该列表中选择密钥交换机制。如果省略,则使用 Go 的默认曲线配置。 +

+ + --tls-min-version string