MindMap Gallery K8S controller detailed explanation mind map
This is a detailed mind map about K8S controller, which introduces K8S controller parameters in detail, including API version, type, metadata, speculation, etc.
Edited at 2023-11-16 14:10:47This is a mind map about bacteria, and its main contents include: overview, morphology, types, structure, reproduction, distribution, application, and expansion. The summary is comprehensive and meticulous, suitable as review materials.
This is a mind map about plant asexual reproduction, and its main contents include: concept, spore reproduction, vegetative reproduction, tissue culture, and buds. The summary is comprehensive and meticulous, suitable as review materials.
This is a mind map about the reproductive development of animals, and its main contents include: insects, frogs, birds, sexual reproduction, and asexual reproduction. The summary is comprehensive and meticulous, suitable as review materials.
This is a mind map about bacteria, and its main contents include: overview, morphology, types, structure, reproduction, distribution, application, and expansion. The summary is comprehensive and meticulous, suitable as review materials.
This is a mind map about plant asexual reproduction, and its main contents include: concept, spore reproduction, vegetative reproduction, tissue culture, and buds. The summary is comprehensive and meticulous, suitable as review materials.
This is a mind map about the reproductive development of animals, and its main contents include: insects, frogs, birds, sexual reproduction, and asexual reproduction. The summary is comprehensive and meticulous, suitable as review materials.
DaemonSet/Deployment/StatefulSet
apiVersion
kind
metadata
name
String type, defines the DaemonSet name
namesapce
Define namespace
labels
Character list type, defines label
annotations
List type, annotations that define DaemonSet, key/value representation
deletionGracePeriodSeconds
Numeric type, the number of seconds allowed before the Pod terminates gracefully and is removed from the system
clusterName
String type, defines the k8s cluster name, Differentiate multiple k8s clusters
Common field parameters of YAML files
ownerReferences
Object type, list of objects this object depends on. If in the list If all objects are deleted, this object will be garbage collected.
creationTimestamp
Timestamp, client cannot create
deletionTimestamp
Character type, is the RFS 3339 date and time, This resource will be deleted
finalizers
Must be empty before the object can be deleted from the registry
generateName
String type, GenerateName is an optional prefix used by the server, Used to generate a unique name (only if the 'name' field is not provided)
generation
A numeric type that represents a specific generated sequence number for the desired state. Populated by the system, read-only.
managedFields
ManagedFields map workflow ids and versions to objects managed by this workflow. This is primarily used for internal housekeeping, and users generally do not need to set or understand this field
resourceVersion
Represents the internal version of the object
selfLink
The URL of this object, populated by the system, Read only, removed in version 1.21.
uid
UID is a unique value in time and space for this object. it usually Generated by the server when a resource is successfully created
spec
selector (required field)
matchExpressions
key
String type, required field
operator
String type, required field
values
string list type
matchLabels
Character list type, represented by {key, value}
template (required field)
metadata
labels
Character list type, represented by {key, value}
name
Character type, defines the pod name
namespace
Character type, defining namespace
annotations
Character list type, represented by {key, value}
Same as .spec.metadata, only common parameters are listed here
spec
tolerations
key
operator
effect
When the operator is equal, key and effec must be satisfied at the same time; when the operator is exists, key and effect can be called if one of them is satisfied.
containers (required field)
name (required field)
Character type, defines the container name
image
Character type, defining the image used by the container
resources
limits
Character list type, represented by {key, value}
requests
Character list type, represented by {key, value}
volumeMount
mountPath (required field)
String type, defining the container mounting path
mountPropagation
String type that determines how mounts are propagated from the host to the container and other methods
name (required field)
String type, matching the name of the volume
readOnly
Boolean type, if set to true, it is mounted in read-only mode, otherwise it is read-write (false or unspecified). The default is false.
subPath
String type, defining container subpath
subPathExpr
String type, the extended path within the volume where the container's volume is located Install. SubPathExpr and SubPath are mutually exclusive.
args
Character list type, defining parameters passed to the command
command
Character list type, defining the command passed in
env
name (required field)
String type, defines the name of the environment variable
value
String type, define variables
valueFrom
configMapKeyRef
key (required field)
String type, defines the key of ConfigMap
name
String type, defines the ConfigMap name
optional
Boolean type specifying whether the ConfigMap or its key must be defined
fieldRef
apiVersion
String type, version of the schema FieldPath is written in, defaults to "v1"
fieldPath (required field)
String type, path to the field to be selected in the specified API version
resourceFieldRef
containerName
String type, defines the container name
divisor
String type, specifies the output format of public resources, the default is "1"
resource (required field)
String type, defining the selected resource
secretKeyRef
key (required field)
String type, defines the secret key
name
String type, defines secret name
optional
Boolean type specifying whether the Secret or its key must be defined
envFrom
configMapRef
name
String type, the name of the reference object
optional
Boolean type, specifying whether the ConfigMap must be defined
prefix
String type, optional identifier prepared before each key in the ConfigMap. must be C_IDENTIFIER.
secretRef
name
String type, the name of the reference object
optional
Boolean type, specifies whether Secret must be defined
imagePullPolicy
String type, defining the image pull strategy, including Always (always pull the remote image), Never (never pull the image), IfNotPresent (if there is a local mirror, pull the remote image), the default is Always.
life cycle
postStart
exec
command
Character list type, the command is a command line executed inside the container, an exit status of 0 is considered Healthy and non-zero are unhealthy.
httpGet
host
String type, host name to connect to, default is pod IP
httpHeaders
name (required field)
String type, title field name
value (required field)
String type, header field value
path
String type, path to access the HTTP server
port (required field)
String type, the name or number of the port to be accessed on the container. The number must be within Range is 1 to 65535
scheme
String type used to connect to the host scheme. Default is HTTP.
tcpSocket
host
String type, host name to connect to, default is pod IP
port (required field)
String type, the number or name of the port to be accessed on the container. The number must be within The range is 1 to 65535. The name must be IANA_SVC_Name.
preStop
exec
command
Character list type, the command is a command line executed inside the container, an exit status of 0 is considered Healthy and non-zero are unhealthy.
httpGet
host
String type, host name to connect to, default is pod IP
httpHeaders
name (required field)
String type, title field name
value (required field)
String type, header field value
path
String type, path to access the HTTP server
port (required field)
String type, the name or number of the port to be accessed on the container. The number must be within Range is 1 to 65535
scheme
String type used to connect to the host scheme. Default is HTTP.
tcpSocket
host
String type, host name to connect to, default is pod IP
port (required field)
String type, the number or name of the port to be accessed on the container. The number must be within The range is 1 to 65535. The name must be IANA_SVC_Name.
livenessProbe (liveness probe)
exec
command
Character list type, the command is a command line executed inside the container, an exit status of 0 is considered Healthy and non-zero are unhealthy.
failureThreshold
Numeric type, defines the number of failed detections, the default is 3 times, the minimum is 1 time
grpc
port (required field)
Numeric type, defining the port number of the gRPC service. Number must be between 1 and 65535
service
String type, defining the service of the gRPC service
httpGet
host
String type, host name to connect to, default is pod IP
httpHeaders
name (required field)
String type, title field name
value (required field)
String type, header field value
path
String type, path to access the HTTP server
port (required field)
String type, the name or number of the port to be accessed on the container. The number must be within Range is 1 to 65535
scheme
String type used to connect to the host scheme. Default is HTTP.
initialDelaySeconds
Numeric type, the number of seconds after the container is started before the live detection is started.
periodSeconds
Number type, how often (in seconds) to perform probing. The default is 10 seconds. at the lowest limit The value is 1.
successThreshold
Numeric type, the minimum number of consecutive successes after which a detection is considered successful after a failure. The default value is 1. Must be 1 to activate and start. The minimum value is 1.
tcpSocket
port (required field)
String type, the number or name of the port to be accessed on the container. The number must be within The range is 1 to 65535. The name must be IANA_SVC_Name.
terminationGracePeriodSeconds
Numeric type, optional duration (seconds) for Pod termination on probe failure. For example, if this value is set to 30s, the pod will have 30s to perform business operations after the delete pod command is issued.
timeoutSeconds
Numeric type, the number of seconds after the probe times out. Default is 1 second. The minimum value is 1
ports
containerPort (required field)
Numeric type, defines the container port, the port range is 0-65536
hostIP
String type, which host IP to bind the external port to
hostPort
Numeric type, defines the host port, the port range is 0-65536
name
String type, defining the name of the port
protocol
String type that defines the protocol of the port. Must be UDP, TCP or SCTP. Default is "TCP".
readinessProbe (readiness probe)
exec
command
Character list type, the command is a command line executed inside the container, an exit status of 0 is considered Healthy and non-zero are unhealthy.
failureThreshold
Numeric type, defines the number of failed detections, the default is 3 times, the minimum is 1 time
grpc
port (required field)
Numeric type, defining the port number of the gRPC service. Number must be between 1 and 65535
service
String type, defining the service of the gRPC service
httpGet
host
String type, host name to connect to, default is pod IP
httpHeaders
name (required field)
String type, title field name
value (required field)
String type, header field value
path
String type, path to access the HTTP server
port (required field)
String type, the name or number of the port to be accessed on the container. The number must be within Range is 1 to 65535
scheme
String type used to connect to the host scheme. Default is HTTP.
initialDelaySeconds
Numeric type, the number of seconds after the container is started before the live detection is started.
periodSeconds
Number type, how often (in seconds) to perform probing. The default is 10 seconds. at the lowest limit The value is 1.
successThreshold
Numeric type, the minimum number of consecutive successes after which a detection is considered successful after a failure. The default value is 1. Must be 1 to activate and start. The minimum value is 1.
tcpSocket
port (required field)
String type, the number or name of the port to be accessed on the container. The number must be within The range is 1 to 65535. The name must be IANA_SVC_Name.
terminationGracePeriodSeconds
Numeric type, optional duration (seconds) for Pod termination on probe failure. For example, if this value is set to 30s, the pod will have 30s to perform business operations after the delete pod command is issued.
timeoutSeconds
Numeric type, the number of seconds after the probe times out. Default is 1 second. The minimum value is 1
securityContext
allowPrivilegeEscalation
Boolean type, AllowPrivilegeEscalation controls whether the process can obtain more privileges than its parent process. This bool direct control will set the no.new_prvs flag on the container process
capabilities
add
Character list type, added functionality
drop
Character list type, delete function
privileged
Boolean type to run the container in privileged mode. A process in a privileged container is essentially equivalent to root on the host machine. The default is false. Please note that this field cannot be set when spec.os.name is windows
procMount
String type, procMount represents the proc mount type to be used for the container. This default value is DefaultProcMount, which uses the container runtime defaults read-only path and shielded path. This requires the ProcMountType feature flag.
readOnlyRootFilesystem
Boolean whether this container has a read-only root filesystem. The default value is false
runAsGroup
Numeric type, GID of the entry point of the running container process. Use runtime to default if not set. Can also be set in PodSecurityContext. If both SecurityContext and PodSecurityContext are set, the value specified in SecurityContext takes precedence
runAsNonRoot
A Boolean indicating that the container must be run as a non-root user. If true, the Kubelet will verify the image at runtime to ensure that it does not run as UID 0 (root), which would fail to start the container if it were started. If not set or false, no such validation will be performed. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
runAsUser
Numeric type, UID of the entry point of the running container process. Defaults to user if not specified, specified in image metadata. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
seLinuxOptions
level
String type, Level is the SELinux level label applied to the container
role
String type, Role is the SELinux role label applied to the container.
type
String type, Type is the SELinux type label applied to the container.
user
String type, User is the SELinux user label applied to the container.
seccompProfile
localhostProfile
String type, localhostProfile represents the profile defined in the file on the node use. The profile must be pre-configured on the node for it to work.
type (required field)
String type indicating which type of seccomp profile will be applied. Valid options are: Localhost - The configuration file defined in the file on the node should be used. RuntimeDefault - The container runtime default profile should be used. undefined - no profile should be applied
windowsOptions
gmsaCredentialSpec
String type, GMSACredentialSpec is the GMSA credential specification named by the GMSACredentialSpecName field inline in the GMSA admission webhook (https://github.com/kubernetes-sigs/windows-gmsa).
gmsaCredentialSpecName
String type, GMSACredentialSpecName is the name of the GMSA credential specification to use.
hostProcess
Boolean type, HostProcess determines whether the container should run as a "host process", if HostProcess is true, HostNetwork must also be set to true.
runAsUserName
String type, the user name of the entry point for running the container process in Windows. If not specified, defaults to the user specified in the image metadata. May also be set in PodSecurityContext. If in SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence
startupProbe
exec
command
Character list type, the command is a command line executed inside the container, an exit status of 0 is considered Healthy and non-zero are unhealthy.
failureThreshold
Numeric type, defines the number of failed detections, the default is 3 times, the minimum is 1 time
grpc
port (required field)
Numeric type, defining the port number of the gRPC service. Number must be between 1 and 65535
service
String type, defining the service of the gRPC service
httpGet
host
String type, host name to connect to, default is pod IP
httpHeaders
name (required field)
String type, title field name
value (required field)
String type, header field value
path
String type, path to access the HTTP server
port (required field)
String type, the name or number of the port to be accessed on the container. The number must be within Range is 1 to 65535
scheme
String type used to connect to the host scheme. Default is HTTP.
initialDelaySeconds
Numeric type, the number of seconds after the container is started before the live detection is started.
periodSeconds
Number type, how often (in seconds) to perform probing. The default is 10 seconds. at the lowest limit The value is 1.
successThreshold
Numeric type, the minimum number of consecutive successes after which a detection is considered successful after a failure. The default value is 1. Must be 1 to activate and start. The minimum value is 1.
tcpSocket
port (required field)
String type, the number or name of the port to be accessed on the container. The number must be within The range is 1 to 65535. The name must be IANA_SVC_Name.
terminationGracePeriodSeconds
Numeric type, optional duration (seconds) for Pod termination on probe failure. For example, if this value is set to 30s, the pod will have 30s to perform business operations after the delete pod command is issued.
timeoutSeconds
Numeric type, the number of seconds after the probe times out. Default is 1 second. The minimum value is 1
stdin
Boolean whether this container should allocate a buffer for stdin in the container runtime. If this is not set, reading from stdin in the container will always result in EOF. The default value is false.
stdinOnce
Boolean indicating whether the container runtime should detect when the stdin channel has been opened by a single attachment. When stdin is true, the stdin stream will remain open across multiple additional sessions. If stdinOnce is set to true, stdin is opened when the container starts, is empty until the first client connects to stdin, and then remains open and accepts data until the client disconnects, at which time stdin closes and remains closed, until the container is restarted. If this flag is false, the container will handle reading from stdin and never receive an EOF. The default value is false
terminationMessagePath
String type, the path to the file to which the container terminates to load the message to be written into the container's file system. Messages written for the purpose of concise final status, e.g. assertion failure messages will be truncated by the node if they are larger than 4096 bytes. The total message length for all containers will be limited to 12kb. The default is /dev/termination log. Unable to update.
terminationMessagePolicy
A string type indicating how the termination message should be populated. The file will use the contents of terminationMessagePath to populate the container with status messages regarding success and failure. FallbackToLogsError will use the last chunk if the termination message file is empty and the container exited with an error. Log output is limited to 2048 bytes or 80 lines, whichever is smaller. Defaults to "file". Unable to update.
tty
Boolean type, whether this container should allocate a TTY to itself, also required "stdin" is true. The default value is false.
volumeDevices
devicePath (required field)
String type, devicePath is the path in the container where the device is located mapping
name (required field)
String type, name must match the name of the persistentVolumeClaim in the pod
workingDir
String type, defining the working directory of the container
terminationGracePeriodSeconds
Optional duration (in seconds) for the pod to need to terminate gracefully. Probably reduced in delete request. Value must be a non-negative integer. A value of zero indicates an immediate stop via a termination signal (no chance to close down). If this value is zero, the default grace period will be used. The grace period is the duration (in seconds) after a process has run in The pod will be sent a termination signal, and the process will be forcibly stopped using the termination signal when it starts. Setting this value takes longer than expected to clean up the process. The default is 30 seconds.
volumes
name (required field)
String type, defines the name of volumes
hostPath
path (required field)
String type defining the directory path on the host
type
String type, which defines the default type of host path volume, including DirectoryOrCreate (the given path does not exist, follow-up needs to create an empty directory, permissions are set to 0755, the same group and owner information as kubectl), Directory (in the given path) Directory that must exist on the given path), FileOrCreate (nothing exists at the given path, create empty files as needed, permissions set to 0644, same group and ownership as kubectl), File (file that must exist at the given path) , CharDevice (a character device that must exist on the given path), Socket (a UNIX socket that must exist on the given path), and BlockDevice (a block device that must exist on the given path).
cephfs
monitors (required field)
Character list type, configuration monitor is a collection of Ceph monitors
path
String type, specifying the directory path of ceph
readOnly
Boolean type. When this value is true, the file has read-only permission. Default is false (read and write)
secretFile
String type, SecretFile is the path of the user keyring, the default is /etc/ceph/user.secret
secretRef
name
String type, the name of the reference object
user
String type, User is the rados username
configMap
defaultMode
Numeric type, by default the mode bits are used to set the permissions of the created file. Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts octal and decimal values, JSON requires the value of the decimal mode bits. The default value is 0644. Directories in the path are not affected by this setting.
items
key (required field)
String type, defines the key of configMap
mode
Numeric type, the mode bits used to set the permissions of this file
path (required field)
String type, relative path to the file to map the key to
name
String type, the name of the reference object
optional
Boolean type specifying whether the ConfigMap or its key must be defined
emptyDir
medium
String type, the storage media type that should support the directory. The default value is "" This means using the node's default media. Must be an empty string (default) or memory
sizeLimit
String type, total amount of local storage required for the EmptyDir volume
glusterfs
endpoints (required field)
String type, specifying the gulsterfs node name
path (required field)
String type, specifying the path to mount glusterfs
readOnly
Boolean type. If this value is true, glusterfs is mounted in read-only mode. The default is false.
iscsi
chapAuthDiscovery
Boolean type, whether to support iSCSI discovery CHAP authentication
chapAuthSession
Boolean type, whether to support iSCSI session CHAP authentication
fsType
String type. The host operating system supports file system types, including ext4", "xfs", "ntfs"
initiatorName
String type, custom iSCSI initiator name. If initiatorName is specified as iscsiInterface At the same time, the new iSCSI interface <target portal>:<volume will create name> for the connection.
iqn (required field)
String type, target iSCSI qualified name
iscsiInterface
String type, iSCSI interface name using iSCSI transmission. Default is "default" (tcp)
lun (required field)
Numeric type, iSCSI target Lun number
portals
Character list type, iSCSI target portal list. If the port is not the default port (usually TCP ports 860 and 3260)
readOnly
Boolean type, this value is true, the file system has read-only permissions, the default is false.
secretRef
name
String type, referenced object
targetPortal (required field)
String type, iSCSI target portal. If the port is not the default (usually TCP ports 860 and 3260).
nfs
path (required field)
String type, path exported by NFS server
readOnly
Boolean type, this value is true, the file system has read-only permissions, the default is false.
server (required field)
String type, Server is the host name or IP address of the NFS server
persistentVolumeClaim
claimName (required field)
String type, specifying the name of the claim
readOnly
Boolean type, this value is true, the file system has read-only permissions, the default is false.
secret
defaultMode
Numeric type. By default, the mode bits are used to set the permissions of the created file. Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts octal and decimal values, JSON requires the value of the decimal mode bits. The default value is 0644
items
key
String type, defines the secret key
mode
Numeric type that sets the mode bits for this file's permissions. Must be a value between 0000 and 0777 in octal or 0 and 511 in decimal. YAML accepts octal and decimal values
path (required field)
String type, relative path to the file to map the key to. May not be an absolute path The path cannot contain the path element "..". Cannot start a string with '..'.
optional
Boolean type that specifies whether the Secret or its key must be defined
secretName
String type, the name of the secret to use in the pod namespace
affinity
nodeAffinity
preferredDuringSchedulingIgnoredDuringExecution
preference (required field)
matchExpressions
key (required field)
operator (required field)
values
matchFields
key (required field)
operator (required field)
values
weight (required field)
Numeric type, ranging from 1-100
requiredDuringSchedulingIgnoredDuringExecution
nodeSelectorTerms (required field)
matchExpressions
key (required field)
operator (required field)
values
matchFields
key (required field)
operator (required field)
values
podAffinity
preferredDuringSchedulingIgnoredDuringExecution
podAffinityTerm (required field)
labelSelector
matchExpressions
key (required field)
operator (required field)
values
matchLabels
Character list type, represented by {key, value}
namespaceSelector
matchExpressions
key (required field)
operator (required field)
values
matchLabels
Character list type, represented by {key, value}
namespaces
Character type, defines namespace
topologyKey (required field)
String type, definition
weight (required field)
requiredDuringSchedulingIgnoredDuringExecution
podAntiAffinity
preferredDuringSchedulingIgnoredDuringExecution
requiredDuringSchedulingIgnoredDuringExecution
labelSelector
matchExpressions
key (required field)
operator (required field)
values
matchLabels
Character list type, represented by {key, value}
namespaceSelector
matchExpressions
key (required field)
operator (required field)
values
matchLabels
Character list type, represented by {key, value}
namespaces
Character type, defines namespace
topologyKey (required field)
String type, definition
activeDeadlineSeconds
numeric type, optional duration (seconds) relative to the time the system will actively try to mark it To fail and terminate the previous StartTime related container. Value must be a positive integer.
automountServiceAccountToken
A Boolean indicating that the service account token will be installed automatically.
dnsConfig
nameservers
Character list type, a list of DNS name server IP addresses. This will be appended to the base Name servers generated from DNSPolicy. Duplicate nameservers will have been removed
options
name
value
searches
Character list type, a list of DNS search domains used for hostname lookups. This will be appended to Base search path generated from DNSPolicy. Duplicate search paths will be removed.
dnsPolicy
String type, set the DNS policy, the default is "ClusterFirst". Valid values are "ClusterFirstWithHostNet", "ClusterFirst", "Default", or "None". To set DNS options with hostNetwork, you must explicitly specify the DNS policy as "ClusterFirstWithHostNet".
enableServiceLinks
A Boolean type indicating whether the Pod's environment variable should be injected, matching Docker's syntax. Default is true.
ephemeralContainers
Object list type, a list of temporary containers running in this pod, can be used for debugging
hostAliases
hostnames
Character list type, specifying the host name
ip
String type, specifying the IP address
hostIPC
Boolean type, use the host's ipc namespace, the default is false
hostNetwork
Boolean type, use the host's network namespace, default is false
hostPID
Boolean type, uses the host's PID namespace, the default is false
hostname
String type, specifies the host name of the Pod. If not specified, the host name of the Pod will be set to a system-defined value.
imagePullSecrets
name
referenced object
initContainers
name
image
command
volumeMounts
name
mountPath
env
envFrom
imagePullPolicy
ports
readinessProbe
resources
livenessProbe
life cycle
nodeName
String type, which is a request to schedule this pod to a specific node
nodeSelector
String list type, NodeSelector is a selector that must be true for a pod to fit into a node. A selector that must match the node's label to schedule the pod
os
name (required field)
Character type, Name is the name of the operating system. Currently supported values are linux and windows
tion
Clients should expect to handle appended values and handle unrecognized values
overhead
A string list type that specifies the additional resources that need to be allocated when running the Pod. It is an option field that can be used to allocate additional memory or CPU to the container.
preemptionPolicy
String type, specifying the Pod pre-occupation policy on a Node. When a new Pod is scheduled to an already occupied Node, it will decide how to handle the Pod running on the Node. There are three strategies: Never (which will not force a running Pod to be occupied), Always ( Allows pre-occupation of running Pods), LeastRequested (pre-occupation of Pods with the smallest resource requests)
priority
Numeric type, which is an integer and represents the priority of the Pod
priorityClassName
String type, a reference to the PriorityClass object that defines the priority of the Pod.
readinessGates
conditionType (required field)
ConditionType refers to a condition in the pod condition list Match type.
restartPolicy
String type, restart strategy for all containers in the pod. The strategy includes Always, OnFailure, Never, the default is Always.
runtimeClassName
String type, RuntimeClassName specifies the running environment of a Pod. In Kubernetes, different runtime environments can have different features, such as resource limits and storage volume configurations.
schedulerName
String type. If specified, the pod will be scheduled by the specified scheduler. If not specified, the pod will be scheduled by the default scheduler
securityContext
Object type, SecurityContext contains pod-level security properties and public container settings. Default is empty
serviceAccount
String type, DeprecatedServiceAccount is the depreciation alias of ServiceAccountName. Deprecated: use serviceAccountName instead
serviceAccountName
setHostnameAsFQDN
A Boolean type that specifies whether the container's hostname is set to the container's fully qualified domain name (FQDN). By default, the container's hostname will be set to the container's name.
shareProcessNamespace
Boolean type that shares a process namespace among all containers in the pod. Once set, the container will be able to retrieve data from other containers in the same pod, and the first process in each container will not be assigned PID 1. HostPID and ShareProcessNamespace cannot be set at the same time. Optional: Defaults to false.
subdomain
subtopic
topologySpreadConstraints
labelSelector
matchExpressions
key (required field)
operator (required field)
values
matchLabels
Character list type, represented by {key, value}
maxSkew (required field)
Numeric type, MaxSkew describes the degree of uneven distribution of Pods. When "whenUnsatisable=DoNotSchedule" is used, it is the maximum allowed value. The number of matching pods in the target topology and the global minimum.
topologyKey (required field)
String type, TopologyKey is the key of the node label. Node with this label Keys and identical values are considered to be in the same topology
whenUnsatisfiable (required field)
whenUnsatisfiable How to handle Pod proliferation limits if the indicated Pod is not satisfied, DoNotSchedule (default) tells the scheduler not to schedule,
minReadySeconds
DeamonSet Minimum number of seconds for new Pod creation, default is 0
revisionHistoryLimit
Set the number of old history records allowed to be reviewed, the default value is 10.
replicas
Deployment and StatefulSet controllers have this parameter DeamonSet controller does not have this parameter.
paused
strategy
rollingUpdate
maxSurge
maxUnavailable
type
Exclusive to deployment controller
updateStrategy
rollingUpdate
partition
type
StatefulSet Pod update strategy
updateStrategy
rollingUpdate
maxSurge
maxUnavailable
type
DaemonSet Pod update strategy
persistentVolumeClaimRetentionPolicy
whenDeleted
If the strategy is Retain, after the StatefulSet is deleted, the pvc will not be affected; if the strategy is Delete, after the StatefulSet is deleted, the pvc will also be deleted.
whenScaled
If the strategy is Retain, after the StatefulSet is scaled down, pvc will not be affected by the reduction; if the strategy is Delete, after the StatefulSet is scaled down, the pvc will be scaled down.
podManagementPolicy
serviceName (required field)
volumeClaimTemplates
apiVersion
kind
metadata
spec
accessModes
dataSource
apiGroup
kind (required field)
name (required field)
dataSourceRef
apiGroup
kind (required field)
name (required field)
resources
limits
requests
selector
matchExpressions
key (required field)
operator (required field)
values
matchLabels
storageClassName
volumeMode
volumeName
Unique to StatefulSet controller
subtopic
subtopic
subtopic
subtopic