KUBERNETES(1)(kubernetes) KUBERNETES(1)(kubernetes) Eric Paris Jan 2015 (NAME) kube-proxy - (SYNOPSIS) kube-proxy [] (DESCRIPTION) . API TCP UDP SCTP (round-robin) . Docker-links . DNS IP . API apiserver . (OPTIONS) --allow_dynamic_housekeeping=true (housekeeping) . --application_metrics_count_limit=100 ( ). --bind-address=0.0.0.0 kube-proxy IP . kube-proxy IP . --config . --bind-address-hard-fail=false true kube-proxy . --boot_id_file="/proc/sys/kernel/random/boot_id" (boot-id). . --cleanup=false true iptables ipvs . --cluster-cidr="" CIDR . ( dual- stack CIDR .) --detect-local-mode ClusterCIDR IP kube-proxy . ( .) --config . --config="" . --config-sync-period=15m0s apiserver. 0 . --conntrack-max-per-core=32768 NAT (0 conntrack- min). --conntrack-min=131072 conntrack conntrack-max-per-core ( conntrack-max-per-core=0 ). --conntrack-tcp-be-liberal=false TCP nf_conntrack_tcp_be_liberal 1. --conntrack-tcp-timeout-close-wait=1h0m0s NAT TCP CLOSE_WAIT. --conntrack-tcp-timeout-established=24h0m0s TCP ( 0 ). --conntrack-udp-timeout=0s (UNREPLIED) UDP ( 0 ). --conntrack-udp-timeout-stream=0s (ASSURED) UDP ( 0 ). --container_hints="/etc/cadvisor/container_hints.json" (container hints). --containerd="/run/containerd/containerd.sock" (endpoint) containerd. --containerd-namespace="k8s.io" containerd. --containerd_env_metadata_whitelist="" : env_metadata_whitelist . containerd . --crio_client_timeout=0s CRI-O. . --detect-local-mode= . --config . --disable_root_cgroup_stats=false Cgroup . --docker_only=false . --enable_load_reader=false (cpu load reader) . --event_storage_age_limit="default=0" ( ). - ( creation oom) "default" . . --event_storage_event_limit="default=0" ( ). - ( creation oom) "default" . . --feature-gates= = / . : APIResponseCompression=true|false (BETA - default=true) APIServerIdentity=true|false (BETA - default=true) APIServingWithRoutine=true|false (ALPHA - default=false) AllAlpha=true|false (ALPHA - default=false) AllBeta=true|false (BETA - default=false) AllowParsingUserUIDFromCertAuth=true|false (BETA - default=true) AllowUnsafeMalformedObjectDeletion=true|false (ALPHA - default=false) AtomicFIFO=true|false (BETA - default=true) AuthorizePodWebsocketUpgradeCreatePermission=true|false (BETA - default=true) CBORServingAndStorage=true|false (ALPHA - default=false) CPUManagerPolicyAlphaOptions=true|false (ALPHA - default=false) CPUManagerPolicyBetaOptions=true|false (BETA - default=true) CRDObservedGenerationTracking=true|false (BETA - default=true) CRIListStreaming=true|false (ALPHA - default=false) CSIVolumeHealth=true|false (ALPHA - default=false) ClearingNominatedNodeNameAfterBinding=true|false (BETA - default=true) ClientsAllowCARotation=true|false (BETA - default=true) ClientsAllowCBOR=true|false (ALPHA - default=false) ClientsAllowTLSCacheGC=true|false (BETA - default=true) ClientsPreferCBOR=true|false (ALPHA - default=false) CloudControllerManagerWatchBasedRoutesReconciliation=true|false (ALPHA - default=false) CloudControllerManagerWebhook=true|false (ALPHA - default=false) ClusterTrustBundle=true|false (BETA - default=false) ClusterTrustBundleProjection=true|false (BETA - default=false) ComponentFlagz=true|false (BETA - default=true) ComponentStatusz=true|false (BETA - default=true) ConcurrentWatchObjectDecode=true|false (BETA - default=false) ConstrainedImpersonation=true|false (BETA - default=true) ContainerCheckpoint=true|false (BETA - default=true) ContainerRestartRules=true|false (BETA - default=true) ContainerStopSignals=true|false (ALPHA - default=false) ContextualLogging=true|false (BETA - default=true) ControllerManagerReleaseLeaderElectionLockOnExit=true|false (ALPHA - default=false) CoordinatedLeaderElection=true|false (BETA - default=false) CrossNamespaceVolumeDataSource=true|false (ALPHA - default=false) DRAConsumableCapacity=true|false (BETA - default=true) DRADeviceBindingConditions=true|false (BETA - default=true) DRADeviceTaintRules=true|false (BETA - default=false) DRADeviceTaints=true|false (BETA - default=true) DRAExtendedResource=true|false (BETA - default=true) DRAListTypeAttributes=true|false (ALPHA - default=false) DRANodeAllocatableResources=true|false (ALPHA - default=false) DRAPartitionableDevices=true|false (BETA - default=true) DRAResourceClaimDeviceStatus=true|false (BETA - default=true) DRAResourceClaimGranularStatusAuthorization=true|false (BETA - default=true) DRAResourcePoolStatus=true|false (ALPHA - default=false) DRASchedulerFilterTimeout=true|false (BETA - default=true) DRAWorkloadResourceClaims=true|false (ALPHA - default=false) DeclarativeValidationBeta=true|false (BETA - default=true) DeploymentReplicaSetTerminatingReplicas=true|false (BETA - default=true) DetectCacheInconsistency=true|false (BETA - default=true) EnvFiles=true|false (BETA - default=true) EventedPLEG=true|false (ALPHA - default=false) ExtendWebSocketsToKubelet=true|false (BETA - default=true) GangScheduling=true|false (ALPHA - default=false) GenericWorkload=true|false (ALPHA - default=false) GracefulNodeShutdown=true|false (BETA - default=true) GracefulNodeShutdownBasedOnPodPriority=true|false (BETA - default=true) HPAConfigurableTolerance=true|false (BETA - default=true) HPAScaleToZero=true|false (ALPHA - default=false) HostnameOverride=true|false (BETA - default=true) ImageVolumeWithDigest=true|false (ALPHA - default=false) InOrderInformersBatchProcess=true|false (BETA - default=true) InPlacePodLevelResourcesVerticalScaling=true|false (BETA - default=true) InPlacePodVerticalScalingExclusiveCPUs=true|false (ALPHA - default=false) InPlacePodVerticalScalingExclusiveMemory=true|false (ALPHA - default=false) InPlacePodVerticalScalingInitContainers=true|false (BETA - default=true) KubeletCrashLoopBackOffMax=true|false (BETA - default=true) KubeletEnsureSecretPulledImages=true|false (BETA - default=true) KubeletInUserNamespace=true|false (ALPHA - default=false) KubeletSeparateDiskGC=true|false (BETA - default=true) KubeletServiceAccountTokenForCredentialProviders=true|false (BETA - default=true) ListFromCacheSnapshot=true|false (BETA - default=true) LocalStorageCapacityIsolationFSQuotaMonitoring=true|false (BETA - default=false) LoggingAlphaOptions=true|false (ALPHA - default=false) LoggingBetaOptions=true|false (BETA - default=true) ManifestBasedAdmissionControlConfig=true|false (ALPHA - default=false) MatchLabelKeysInPodTopologySpread=true|false (BETA - default=true) MatchLabelKeysInPodTopologySpreadSelectorMerge=true|false (BETA - default=true) MaxUnavailableStatefulSet=true|false (BETA - default=false) MemoryQoS=true|false (ALPHA - default=false) MutablePVNodeAffinity=true|false (ALPHA - default=false) MutablePodResourcesForSuspendedJobs=true|false (BETA - default=true) MutableSchedulingDirectivesForSuspendedJobs=true|false (BETA - default=true) NativeHistograms=true|false (ALPHA - default=false) NodeDeclaredFeatures=true|false (BETA - default=true) NominatedNodeNameForExpectation=true|false (BETA - default=true) OpenAPIEnums=true|false (BETA - default=true) OpportunisticBatching=true|false (BETA - default=true) PLEGOnDemandRelist=true|false (BETA - default=true) PersistentVolumeClaimUnusedSinceTime=true|false (ALPHA - default=false) PodAndContainerStatsFromCRI=true|false (ALPHA - default=false) PodCertificateRequest=true|false (BETA - default=false) PodDeletionCost=true|false (BETA - default=true) PodLevelResourceManagers=true|false (ALPHA - default=false) PodLevelResources=true|false (BETA - default=true) PodLogsQuerySplitStreams=true|false (ALPHA - default=false) PodReadyToStartContainersCondition=true|false (BETA - default=true) PodTopologyLabelsAdmission=true|false (BETA - default=true) PodsAPI=true|false (ALPHA - default=false) PortForwardWebsockets=true|false (BETA - default=true) PreventStaticPodAPIReferences=true|false (BETA - default=true) QOSReserved=true|false (ALPHA - default=false) ReduceDefaultCrashLoopBackOffDecay=true|false (ALPHA - default=false) RelaxedServiceNameValidation=true|false (BETA - default=true) ReloadKubeletClientCAFile=true|false (BETA - default=true) ReloadKubeletServerCertificateFile=true|false (BETA - default=true) RemoteRequestHeaderUID=true|false (BETA - default=true) ResourceHealthStatus=true|false (BETA - default=true) ResourceHealthStatusMessage=true|false (BETA - default=true) RestartAllContainersOnContainerExits=true|false (BETA - default=true) RotateKubeletServerCertificate=true|false (BETA - default=true) RuntimeClassInImageCriApi=true|false (ALPHA - default=false) SELinuxMount=true|false (BETA - default=false) SchedulerAsyncAPICalls=true|false (BETA - default=false) SchedulerAsyncPreemption=true|false (BETA - default=true) SchedulerPopFromBackoffQ=true|false (BETA - default=true) ServiceAccountNodeAudienceRestriction=true|false (BETA - default=true) ShardedListAndWatch=true|false (ALPHA - default=false) SizeBasedListCostEstimate=true|false (BETA - default=true) StaleControllerConsistencyDaemonSet=true|false (BETA - default=true) StaleControllerConsistencyJob=true|false (BETA - default=true) StaleControllerConsistencyReplicaSet=true|false (BETA - default=true) StaleControllerConsistencyStatefulSet=true|false (BETA - default=true) StatefulSetSemanticRevisionComparison=true|false (BETA - default=true) StorageCapacityScoring=true|false (ALPHA - default=false) StorageVersionAPI=true|false (ALPHA - default=false) StorageVersionHash=true|false (BETA - default=true) StorageVersionMigrator=true|false (BETA - default=false) StrictIPCIDRValidation=true|false (BETA - default=true) StructuredAuthenticationConfigurationEgressSelector=true|false (BETA - default=true) StructuredAuthenticationConfigurationJWKSMetrics=true|false (BETA - default=true) TaintTolerationComparisonOperators=true|false (ALPHA - default=false) TokenRequestServiceAccountUIDValidation=true|false (BETA - default=true) TopologyAwareWorkloadScheduling=true|false (ALPHA - default=false) TopologyManagerPolicyAlphaOptions=true|false (ALPHA - default=false) TopologyManagerPolicyBetaOptions=true|false (BETA - default=true) TranslateStreamCloseWebsocketRequests=true|false (BETA - default=true) UnauthenticatedHTTP2DOSMitigation=true|false (BETA - default=true) UnknownVersionInteroperabilityProxy=true|false (BETA - default=true) UnlockWhileProcessingFIFO=true|false (BETA - default=true) UserNamespacesHostNetworkSupport=true|false (ALPHA - default=false) VolumeLimitScaling=true|false (ALPHA - default=false) WatchCacheInitializationPostStartHook=true|false (BETA - default=true) WatchList=true|false (BETA - default=true) WatchListClient=true|false (BETA - default=true) WindowsCPUAndMemoryAffinity=true|false (ALPHA - default=false) WindowsGracefulNodeShutdown=true|false (BETA - default=true) WorkloadAwarePreemption=true|false (ALPHA - default=false) WorkloadWithJob=true|false (ALPHA - default=false) --config . --global_housekeeping_interval=1m0s . --healthz-bind-address=0.0.0.0:10256 IP "0.0.0.0:10256". --config . --healthz-port=10256 . 0 . --hostname-override="" kube-proxy . (hostname) . --housekeeping_interval=10s . --init-only=false true (root) . kube- proxy CAP_NET_ADMIN . --iptables-localhost-nodeports=true false kube-proxy NodePort localhost . ( iptables IPv4 IPv6 localhost NodePort .) --iptables-masquerade-bit=14 iptables ipvs fwmark SNAT . [0, 31] . --iptables-min-sync-period=1s iptables ( '5s' '1m' '2h22m'). 0 Service EndpointSlice iptables . --iptables-sync-period=30s ( '5s' '1m' '2h22m') . 0 . --ipvs-exclude-cidrs=[] CIDR ipvs IPVS . --ipvs-min-sync-period=1s IPVS ( '5s' '1m' '2h22m'). 0 Service EndpointSlice IPVS . --ipvs-scheduler="" ipvs ipvs . --ipvs-strict-arp=false ARP arp_ignore 1 arp_announce 2. --ipvs-sync-period=30s ( '5s' '1m' '2h22m') . 0 . --ipvs-tcp-timeout=0s TCP IPVS 0 ( '5s' '1m' '2h22m'). --ipvs-tcpfin-timeout=0s TCP IPVS FIN 0 ( '5s' '1m' '2h22m'). --ipvs-udp-timeout=0s UDP IPVS 0 ( '5s' '1m' '2h22m'). --kube-api-burst=10 (burst) apiserver . --kube-api-content-type="application/vnd.kubernetes.protobuf" apiserver. --kube-api-qps=5 (QPS) apiserver . --kubeconfig="" kubeconfig ( master ). --log-flush-frequency=5s . --log-text-info-buffer-size=0 [] info . . (512) 1000 (1K) 1024 (2Ki) (3M 4G 5Mi 6Gi) . LoggingAlphaOptions . --log-text-split-stream=false [] stderr info stdout . stdout . LoggingAlphaOptions . --log_cadvisor_usage=false cAdvisor . --logging-format="text" . : "text". --machine_id_file="/etc/machine-id,/var/lib/dbus/machine-id" machine-id. . --masquerade-all=false SNAT IP . CNI . . --master="" API ( kubeconfig ). --max_housekeeping_interval=1m0s . --metrics-bind-address=127.0.0.1:10249 IP "127.0.0.1:10249". ( "0.0.0.0:10249" / "[::]:10249" .) . --config . --metrics-port=10249 . 0 . --nodeport-addresses=[] CIDR IP 'primary'. CIDR NodePort IP . 'primary' NodePort IP() Node . NodePort IP . --config . --oom-score-adj=-999 oom-score-adj kube-proxy. [-1000, 1000] . --config . --pod-bridge-interface="" (bridge). --detect-local-mode BridgeInterface kube-proxy . --pod-interface-name-prefix="" . --detect-local-mode InterfaceNamePrefix kube-proxy . --profiling=false true (profiling) /debug/pprof . --config . --proxy-mode= : 'iptables' () 'ipvs' 'nftables' . 'kernelspace' . --config . --referenced_reset_interval=0 ( container_referenced_bytes) 0 (: 0). --show-hidden-metrics-for-version="" . . . : '1.16'. . --config . --storage_driver_buffer_duration=1m0s (commit) . --storage_driver_db="cadvisor" . --storage_driver_host="localhost:8086" : . --storage_driver_password="root" . --storage_driver_secure=false . --storage_driver_table="stats" . --storage_driver_user="root" . --update_machine_info_interval=5m0s . -v, --v=0 (verbosity). --version=false --version --version=raw --version=vX.Y.Z... . --vmodule= pattern=N ( ). --write-config-to="" . (HISTORY) Eric Paris (eparis at redhat dot com) ! Manuals User KUBERNETES(1)(kubernetes)