From 15f1a934584ba847138cc069b41b75f730aa1709 Mon Sep 17 00:00:00 2001 From: Craig Box Date: Sat, 11 Mar 2023 20:55:15 +1300 Subject: [PATCH] Close shortcodes --- content/de/docs/setup/_index.md | 3 ++- .../en/blog/_posts/2021-04-20-annotating-k8s-for-humans.md | 1 + .../command-line-tools-reference/feature-gates-removed.md | 1 + content/en/docs/reference/using-api/cel.md | 7 +++++++ content/en/docs/tasks/administer-cluster/encrypt-data.md | 1 + .../docs/concepts/cluster-administration/flow-control.md | 1 + content/id/docs/tasks/administer-cluster/sysctl-cluster.md | 1 + .../architecture/control-plane-node-communication.md | 2 +- content/uk/docs/setup/_index.md | 2 ++ .../concepts/scheduling-eviction/scheduler-perf-tuning.md | 1 + .../command-line-tools-reference/feature-gates-removed.md | 1 + .../zh-cn/docs/tasks/administer-cluster/encrypt-data.md | 1 + .../zh-cn/docs/tutorials/stateful-application/cassandra.md | 1 + 13 files changed, 21 insertions(+), 2 deletions(-) diff --git a/content/de/docs/setup/_index.md b/content/de/docs/setup/_index.md index 2203fcc19cf59..b1c8bbb9b7803 100644 --- a/content/de/docs/setup/_index.md +++ b/content/de/docs/setup/_index.md @@ -34,7 +34,7 @@ Benutzen Sie eine Docker-basierende Lösung, wenn Sie Kubernetes erlernen wollen | | [IBM Cloud Private-CE (Community Edition)](https://github.com/IBM/deploy-ibm-cloud-private) | | | [IBM Cloud Private-CE (Community Edition) on Linux Containers](https://github.com/HSBawa/icp-ce-on-linux-containers)| | | [k3s](https://k3s.io)| - +{{< /table >}} ## Produktionsumgebung @@ -98,5 +98,6 @@ Die folgende Tabelle für Produktionsumgebungs-Lösungen listet Anbieter und der | [VEXXHOST](https://vexxhost.com/) | ✔ | ✔ | | | | | [VMware](https://cloud.vmware.com/) | [VMware Cloud PKS](https://cloud.vmware.com/vmware-cloud-pks) |[VMware Enterprise PKS](https://cloud.vmware.com/vmware-enterprise-pks) | [VMware Enterprise PKS](https://cloud.vmware.com/vmware-enterprise-pks) | [VMware Essential PKS](https://cloud.vmware.com/vmware-essential-pks) | |[VMware Essential PKS](https://cloud.vmware.com/vmware-essential-pks) | [Z.A.R.V.I.S.](https://zarvis.ai/) | ✔ | | | | | | +{{< /table >}} diff --git a/content/en/blog/_posts/2021-04-20-annotating-k8s-for-humans.md b/content/en/blog/_posts/2021-04-20-annotating-k8s-for-humans.md index 155ff5a3b31f5..f4820fced31e9 100644 --- a/content/en/blog/_posts/2021-04-20-annotating-k8s-for-humans.md +++ b/content/en/blog/_posts/2021-04-20-annotating-k8s-for-humans.md @@ -83,6 +83,7 @@ Adopting a common convention for annotations ensures consistency and understanda | `a8r.io/uptime` | Link to external uptime dashboard. | | `a8r.io/performance` | Link to external performance dashboard. | | `a8r.io/dependencies` | Unstructured text describing the service dependencies for humans. | +{{< /table >}} ## Visualizing annotations: Service Catalogs diff --git a/content/en/docs/reference/command-line-tools-reference/feature-gates-removed.md b/content/en/docs/reference/command-line-tools-reference/feature-gates-removed.md index a3b704d891e5b..0244c7703e1de 100644 --- a/content/en/docs/reference/command-line-tools-reference/feature-gates-removed.md +++ b/content/en/docs/reference/command-line-tools-reference/feature-gates-removed.md @@ -333,6 +333,7 @@ In the following table: | `WindowsRunAsUserName` | `false` | Alpha | 1.16 | 1.16 | | `WindowsRunAsUserName` | `true` | Beta | 1.17 | 1.17 | | `WindowsRunAsUserName` | `true` | GA | 1.18 | 1.20 | +{{< /table >}} ## Descriptions for removed feature gates diff --git a/content/en/docs/reference/using-api/cel.md b/content/en/docs/reference/using-api/cel.md index 23ba98af4062a..532a214f009fc 100644 --- a/content/en/docs/reference/using-api/cel.md +++ b/content/en/docs/reference/using-api/cel.md @@ -59,6 +59,7 @@ Example CEL expressions: | `self.metadata.name == 'singleton'` | Validate that an object's name matches a specific value (making it a singleton) | | `self.set1.all(e, !(e in self.set2))` | Validate that two listSets are disjoint | | `self.names.size() == self.details.size() && self.names.all(n, n in self.details)` | Validate the 'details' map is keyed by the items in the 'names' listSet | +{{< /table >}} ## CEL community libraries @@ -95,6 +96,7 @@ Examples: | `items.map(x, x.weight).sum() == 1.0` | Verify that the "weights" of a list of objects sum to 1.0 | | `lowPriorities.map(x, x.priority).max() < highPriorities.map(x, x.priority).min()` | Verify that two sets of priorities do not overlap | | `names.indexOf('should-be-first') == 1` | Require that the first name in a list if a specific value | +{{< /table >}} See the [Kubernetes List Library](https://pkg.go.dev/k8s.io/apiextensions-apiserver/pkg/apiserver/schema/cel/library#Lists) godoc for more information. @@ -112,6 +114,7 @@ Examples: |-------------------------------------------------------------|----------------------------------------------------------| | `"abc 123".find('[0-9]*')` | Find the first number in a string | | `"1, 2, 3, 4".findAll('[0-9]*').map(x, int(x)).sum() < 100` | Verify that the numbers in a string sum to less than 100 | +{{< /table >}} See the [Kubernetes regex library](https://pkg.go.dev/k8s.io/apiextensions-apiserver/pkg/apiserver/schema/cel/library#Regex) godoc for more information. @@ -136,6 +139,7 @@ Examples: |-----------------------------------------------------------------|------------------------------------------------| | `url('https://example.com:80/').getHost()` | Get the 'example.com:80' host part of the URL. | | `url('https://example.com/path with spaces/').getEscapedPath()` | Returns '/path%20with%20spaces/' | +{{< /table >}} See the [Kubernetes URL library](https://pkg.go.dev/k8s.io/apiextensions-apiserver/pkg/apiserver/schema/cel/library#URLs) godoc for more information. @@ -191,6 +195,7 @@ has(object.namex) ? object.namex == 'special' : request.name == 'special' | 'string' with format=date | timestamp (google.protobuf.Timestamp) | | 'string' with format=datetime | timestamp (google.protobuf.Timestamp) | | 'string' with format=duration | duration (google.protobuf.Duration) | +{{< /table >}} Also see: [CEL types](https://github.com/google/cel-spec/blob/v0.6.0/doc/langdef.md#values), [OpenAPI types](https://swagger.io/specification/#data-types), @@ -225,6 +230,7 @@ expression: | `__dash__` | `-` | | `__slash__` | `/` | | `__{keyword}__` | [CEL **RESERVED** keyword](https://github.com/google/cel-spec/blob/v0.6.0/doc/langdef.md#syntax) | +{{< /table >}} When you escape any of CEL's **RESERVED** keywords you need to match the exact property name use the underscore escaping @@ -239,6 +245,7 @@ Examples on escaping: | `x-prop` | `self.x__dash__prop > 0` | | `redact__d` | `self.redact__underscores__d > 0` | | `string` | `self.startsWith('kube')` | +{{< /table >}} ## Resource constraints diff --git a/content/en/docs/tasks/administer-cluster/encrypt-data.md b/content/en/docs/tasks/administer-cluster/encrypt-data.md index c683c5aa9b2c3..656762c30f506 100644 --- a/content/en/docs/tasks/administer-cluster/encrypt-data.md +++ b/content/en/docs/tasks/administer-cluster/encrypt-data.md @@ -103,6 +103,7 @@ Name | Encryption | Strength | Speed | Key Length | Other Considerations `aesgcm` | AES-GCM with random nonce | Must be rotated every 200k writes | Fastest | 16, 24, or 32-byte | Is not recommended for use except when an automated key rotation scheme is implemented. `aescbc` | AES-CBC with [PKCS#7](https://datatracker.ietf.org/doc/html/rfc2315) padding | Weak | Fast | 32-byte | Not recommended due to CBC's vulnerability to padding oracle attacks. `kms` | Uses envelope encryption scheme: Data is encrypted by data encryption keys (DEKs) using AES-CBC with [PKCS#7](https://datatracker.ietf.org/doc/html/rfc2315) padding (prior to v1.25), using AES-GCM starting from v1.25, DEKs are encrypted by key encryption keys (KEKs) according to configuration in Key Management Service (KMS) | Strongest | Fast | 32-bytes | The recommended choice for using a third party tool for key management. Simplifies key rotation, with a new DEK generated for each encryption, and KEK rotation controlled by the user. [Configure the KMS provider](/docs/tasks/administer-cluster/kms-provider/). +{{< /table >}} Each provider supports multiple keys - the keys are tried in order for decryption, and if the provider is the first provider, the first key is used for encryption. diff --git a/content/id/docs/concepts/cluster-administration/flow-control.md b/content/id/docs/concepts/cluster-administration/flow-control.md index 9cfe98e650f10..5aa02f4725f5d 100644 --- a/content/id/docs/concepts/cluster-administration/flow-control.md +++ b/content/id/docs/concepts/cluster-administration/flow-control.md @@ -243,6 +243,7 @@ https://play.golang.org/p/Gi0PLgVHiUg, yang digunakan untuk menghitung nilai-nil | 6| 256| 2.7134626662687968e-12| 2.9516464018476436e-07| 0.0008895654642000348| | 6| 512| 4.116062922897309e-14| 4.982983350480894e-09| 2.26025764343413e-05| | 6| 1024| 6.337324016514285e-16| 8.09060164312957e-11| 4.517408062903668e-07| +{{< /table >}} ### FlowSchema diff --git a/content/id/docs/tasks/administer-cluster/sysctl-cluster.md b/content/id/docs/tasks/administer-cluster/sysctl-cluster.md index 42acb5d0f599e..667017180fe38 100644 --- a/content/id/docs/tasks/administer-cluster/sysctl-cluster.md +++ b/content/id/docs/tasks/administer-cluster/sysctl-cluster.md @@ -60,6 +60,7 @@ Sysctl berikut ini didukung dalam kelompok _safe_: {{< note >}} Contoh `net.ipv4.tcp_syncookies` bukan merupakan Namespace pada kernel Linux versi 4.4 atau lebih rendah. +{{< /note >}} Daftar ini akan terus dikembangkan dalam versi Kubernetes berikutnya ketika kubelet mendukung mekanisme isolasi yang lebih baik. diff --git a/content/ko/docs/concepts/architecture/control-plane-node-communication.md b/content/ko/docs/concepts/architecture/control-plane-node-communication.md index ed963638b18d3..ff1d9fb11959e 100644 --- a/content/ko/docs/concepts/architecture/control-plane-node-communication.md +++ b/content/ko/docs/concepts/architecture/control-plane-node-communication.md @@ -100,7 +100,7 @@ kubelet, 노드, 파드 또는 서비스로 향하는 모든 트래픽을 전달 SSH 터널은 현재 더 이상 사용되지 않으므로, 수행 중인 작업이 어떤 것인지 모른다면 사용하면 안 된다. [Konnectivity 서비스](#konnectivity-service)가 SSH 통신 채널을 대체한다. -{{< note >}} +{{< /note >}} ### Konnectivity 서비스 {#konnectivity-service} diff --git a/content/uk/docs/setup/_index.md b/content/uk/docs/setup/_index.md index 2168e1eb378f4..89bda3862d60f 100644 --- a/content/uk/docs/setup/_index.md +++ b/content/uk/docs/setup/_index.md @@ -60,6 +60,7 @@ card: | | [IBM Cloud Private-CE (Community Edition)](https://github.com/IBM/deploy-ibm-cloud-private) | | | [IBM Cloud Private-CE (Community Edition) on Linux Containers](https://github.com/HSBawa/icp-ce-on-linux-containers)| | | [k3s](https://k3s.io)| +{{< /table >}} ## Прод оточення {#прод-оточення} @@ -132,5 +133,6 @@ card: | [VEXXHOST](https://vexxhost.com/) | ✔ | ✔ | | | | | [VMware](https://cloud.vmware.com/) | [VMware Cloud PKS](https://cloud.vmware.com/vmware-cloud-pks) |[VMware Enterprise PKS](https://cloud.vmware.com/vmware-enterprise-pks) | [VMware Enterprise PKS](https://cloud.vmware.com/vmware-enterprise-pks) | [VMware Essential PKS](https://cloud.vmware.com/vmware-essential-pks) | |[VMware Essential PKS](https://cloud.vmware.com/vmware-essential-pks) | [Z.A.R.V.I.S.](https://zarvis.ai/) | ✔ | | | | | | +{{< /table >}} diff --git a/content/zh-cn/docs/concepts/scheduling-eviction/scheduler-perf-tuning.md b/content/zh-cn/docs/concepts/scheduling-eviction/scheduler-perf-tuning.md index 01574c7e0775d..d0f99047bae88 100644 --- a/content/zh-cn/docs/concepts/scheduling-eviction/scheduler-perf-tuning.md +++ b/content/zh-cn/docs/concepts/scheduling-eviction/scheduler-perf-tuning.md @@ -207,6 +207,7 @@ change will have no or little effect, for a similar reason. If your cluster has several hundred Nodes or fewer, leave this configuration option at its default value. Making changes is unlikely to improve the scheduler's performance significantly. +{{< /note >}} --> {{< note >}} 当集群中的可调度节点少于 50 个时，调度器仍然会去检查所有的 Node， diff --git a/content/zh-cn/docs/reference/command-line-tools-reference/feature-gates-removed.md b/content/zh-cn/docs/reference/command-line-tools-reference/feature-gates-removed.md index 4c1f7f5344661..0917e56fd824f 100644 --- a/content/zh-cn/docs/reference/command-line-tools-reference/feature-gates-removed.md +++ b/content/zh-cn/docs/reference/command-line-tools-reference/feature-gates-removed.md @@ -360,6 +360,7 @@ In the following table: | `WindowsRunAsUserName` | `false` | Alpha | 1.16 | 1.16 | | `WindowsRunAsUserName` | `true` | Beta | 1.17 | 1.17 | | `WindowsRunAsUserName` | `true` | GA | 1.18 | 1.20 | +{{< /table >}} ### 额外的 Minikube 设置说明