Tasks
Example Task Template
Extend kubectl with plugins
Manage HugePages
Schedule GPUs
Install Tools
Manage Memory, CPU, and API Resources
Access Clusters Using the Kubernetes API
Access Services Running on Clusters
Advertise Extended Resources for a Node
Autoscale the DNS Service in a Cluster
Change the Reclaim Policy of a PersistentVolume
Change the default StorageClass
Cluster Management
Configure Default CPU Requests and Limits for a Namespace
Configure Default Memory Requests and Limits for a Namespace
Configure Memory and CPU Quotas for a Namespace
Configure Minimum and Maximum CPU Constraints for a Namespace
Configure Minimum and Maximum Memory Constraints for a Namespace
Configure Multiple Schedulers
Configure Out Of Resource Handling
Configure Quotas for API Objects
Configure a Pod Quota for a Namespace
Control CPU Management Policies on the Node
Customizing DNS Service
Debugging DNS Resolution
Declare Network Policy
Developing Cloud Controller Manager
Encrypting Secret Data at Rest
Guaranteed Scheduling For Critical Add-On Pods
IP Masquerade Agent User Guide
Kubernetes Cloud Controller Manager
Limit Storage Consumption
Namespaces Walkthrough
Operating etcd clusters for Kubernetes
Persistent Volume Claim Protection
Reconfigure a Node's Kubelet in a Live Cluster
Reserve Compute Resources for System Daemons
Romana for NetworkPolicy
Safely Drain a Node while Respecting Application SLOs
Securing a Cluster
Set Kubelet parameters via a config file
Set up High-Availability Kubernetes Masters
Set up a High-Availablity Etcd Cluster With Kubeadm
Share a Cluster with Namespaces
Static Pods
Storage Object in Use Protection
Use Calico for NetworkPolicy
Use Cilium for NetworkPolicy
Use Kube-router for NetworkPolicy
Using CoreDNS for Service Discovery
Using Sysctls in a Kubernetes Cluster
Using a KMS provider for data encryption
Weave Net for NetworkPolicy
Configure Pods and Containers
Assign CPU Resources to Containers and Pods
Assign Extended Resources to a Container
Assign Memory Resources to Containers and Pods
Assign Pods to Nodes
Attach Handlers to Container Lifecycle Events
Configure Liveness and Readiness Probes
Configure Pod Initialization
Configure Quality of Service for Pods
Configure Service Accounts for Pods
Configure a Pod to Use a ConfigMap
Configure a Pod to Use a PersistentVolume for Storage
Configure a Pod to Use a Projected Volume for Storage
Configure a Pod to Use a Volume for Storage
Configure a Security Context for a Pod or Container
Pull an Image from a Private Registry
Share Process Namespace between Containers in a Pod
Inject Data Into Applications
Define Environment Variables for a Container
Define a Command and Arguments for a Container
Distribute Credentials Securely Using Secrets
Expose Pod Information to Containers Through Environment Variables
Expose Pod Information to Containers Through Files
Inject Information into Pods Using a PodPreset
Run Applications
Delete a StatefulSet
Force Delete StatefulSet Pods
Horizontal Pod Autoscaler
Horizontal Pod Autoscaler Walkthrough
Perform Rolling Update Using a Replication Controller
Run a Replicated Stateful Application
Run a Single-Instance Stateful Application
Run a Stateless Application Using a Deployment
Scale a StatefulSet
Specifying a Disruption Budget for your Application
Update API Objects in Place Using kubectl patch
Access Applications in a Cluster
Accessing Clusters
Communicate Between Containers in the Same Pod Using a Shared Volume
Configure Access to Multiple Clusters
Configure Your Cloud Provider's Firewalls
Connect a Front End to a Back End Using a Service
Create an External Load Balancer
List All Container Images Running in a Cluster
Provide Load-Balanced Access to an Application in a Cluster
Use Port Forwarding to Access Applications in a Cluster
Use a Service to Access an Application in a Cluster
Web UI (Dashboard)
Monitor, Log, and Debug
Application Introspection and Debugging
Auditing
Core metrics pipeline
Debug Init Containers
Debug Pods and Replication Controllers
Debug Services
Debug a StatefulSet
Determine the Reason for Pod Failure
Developing and debugging services locally
Events in Stackdriver
Get a Shell to a Running Container
Logging Using Elasticsearch and Kibana
Logging Using Stackdriver
Monitor Node Health
Tools for Monitoring Compute, Storage, and Network Resources
Troubleshoot Applications
Troubleshoot Clusters
Troubleshooting
Extend Kubernetes
Federation - Run an App on Multiple Clusters
Manage Cluster Daemons
Extend Kubernetes
Configure the aggregation layer
Configuring the aggregation layer allows the Kubernetes apiserver to be extended with additional APIs, which are not part of the core Kubernetes APIs.
Before you begin
You need to have a Kubernetes cluster, and the kubectl command-line tool must be configured to communicate with your cluster. If you do not already have a cluster, you can create one by using Minikube, or you can use one of these Kubernetes playgrounds:
To check the version, enter kubectl version.
Note: There are a few setup requirements for getting the aggregation layer working in your environment to support mutual TLS auth between the proxy and extension apiservers. Kubernetes and the kube-apiserver have multiple CAs, so make sure that the proxy is signed by the aggregation layer CA and not by something else, like the master CA.
Enable apiserver flags
Enable the aggregation layer via the following kube-apiserver flags. They may have already been taken care of by your provider.
--requestheader-client-ca-file=<path to aggregator CA cert>
--requestheader-allowed-names=aggregator
--requestheader-extra-headers-prefix=X-Remote-Extra-
--requestheader-group-headers=X-Remote-Group
--requestheader-username-headers=X-Remote-User
--proxy-client-cert-file=<path to aggregator proxy cert>
--proxy-client-key-file=<path to aggregator proxy key>
If you are not running kube-proxy on a host running the API server, then you must make sure that the system is enabled with the following apiserver flag:
--enable-aggregator-routing=true
What's next
- Setup an extension api-server to work with the aggregation layer.
- For a high level overview, see Extending the Kubernetes API with the aggregation layer.
- Learn how to Extend the Kubernetes API Using Custom Resource Definitions.