copyright | lastupdated | keywords | subcollection | ||
---|---|---|---|---|---|
|
2020-07-31 |
kubernetes, iks |
containers |
{:beta: .beta} {:codeblock: .codeblock} {:deprecated: .deprecated} {:download: .download} {:external: target="_blank" .external} {:faq: data-hd-content-type='faq'} {:gif: data-image-type='gif'} {:help: data-hd-content-type='help'} {:important: .important} {:new_window: target="_blank"} {:note: .note} {:pre: .pre} {:preview: .preview} {:screen: .screen} {:shortdesc: .shortdesc} {:support: data-reuse='support'} {:table: .aria-labeledby="caption"} {:tip: .tip} {:troubleshoot: data-hd-content-type='troubleshoot'} {:tsCauses: .tsCauses} {:tsResolve: .tsResolve} {:tsSymptoms: .tsSymptoms}
{: #service-settings}
Review the default settings for Kubernetes components, such as the kube-apiserver
, kubelet
or kube-proxy
that {{site.data.keyword.containerlong}} sets when you create your cluster.
{: shortdesc}
{: #kube-apiserver}
Review the default settings for the kube-apiserver
master component in {{site.data.keyword.containerlong_notm}}.
{: shortdesc}
Category | Default settings |
---|---|
Default pod tolerations |
|
Privileged pods | allow-privileged=true |
Request headers |
|
Number of client requests |
|
Admission controllers |
|
Kube audit log config |
|
Feature gates | See Feature gates |
{: summary="The rows are read from left to right. The category is in the first column, with the description in the second column."} | |
{: caption="kube-apiserver settings" caption-side="top"} |
{: #kube-controller-manager}
Review the default settings for the kube-controller-manager
master component in {{site.data.keyword.containerlong_notm}}.
{: shortdesc}
Category | Default settings |
---|---|
Feature gates | See Feature gates |
Pod garbage collection threshold | terminated-pod-gc-threshold=12500 |
Horizontal pod autoscaling | horizontal-pod-autoscaler-use-rest-clients=true |
{: summary="The rows are read from left to right. The category is in the first column, with the description in the second column."} | |
{: caption="kube-controller-manager settings" caption-side="top"} |
{: #kubelet}
Review the default settings for the kubelet
worker node component in {{site.data.keyword.containerlong_notm}}.
{: shortdesc}
Category | Default settings |
---|---|
Feature gates | See Feature gates. In addition, CRIContainerLogRotation=true is set. |
Pod manifest path | pod-manifest-path=/etc/kubernetes/manifests |
File check frequency | file-check-frequency=5s |
Container logs |
|
Container runtime endpoint | container-runtime-endpoint=unix:///run/containerd/containerd.sock |
Kubernetes and system reserves |
|
CPU CFS quota | cpu-cfs-quota-period=20ms |
cgroups |
|
Pod eviction |
|
{: summary="The rows are read from left to right. The category is in the first column, with the description in the second column."} | |
{: caption="kubelet settings" caption-side="top"} |
{: #kube-proxy}
Review the default settings for the kube-proxy
worker node component in {{site.data.keyword.containerlong_notm}}.
{: shortdesc}
Category | Default settings |
---|---|
Iptable settings |
|
Proxy mode | proxy-mode=iptables |
Feature gates | See Feature gates |
{: summary="The rows are read from left to right. The category is in the first column, with the description in the second column."} | |
{: caption="kube-proxy settings" caption-side="top"} |
{: #feature-gates}
Review the feature gates that are applied to all master and worker node components by default in {{site.data.keyword.containerlong_notm}} clusters. These feature gates differ from the ones that are set up in community distributions. The {{site.data.keyword.cloud_notm}} provider version enables Kubernetes APIs and features that are at beta. Kubernetes alpha features, which are subject to change, are disabled. {: shortdesc}
Kubernetes version | Default feature gates |
---|---|
1.17 |
|
1.16 |
|
1.15 |
|
1.14 |
|
{: caption="Overview of feature gates" caption-side="top"} | |
{: summary="The rows are read from left to right. The version is in the first column, with the default feature gates in the second column."} |