Documentação
Kubernetes Blog
Parceiros
Comunidade
Casos de estudo
Versões
Informações de Versões
v1.30
v1.29
v1.28
v1.27
v1.26
Português (Portuguese)
English
中文 (Chinese)
Français (French)
Deutsch (German)
한국어 (Korean)
Русский (Russian)
Español (Spanish)
Documentação
Versões Suportadas da Documentação do Kubernetes
Instalação
Instalando a ferramenta kubeadm
Instalando Kubernetes com kOps
Learning environment
Production environment
Container Runtimes
Installing Kubernetes with deployment tools
Bootstrapping clusters with kubeadm
Installing kubeadm
Troubleshooting kubeadm
Creating a cluster with kubeadm
Customizing components with the kubeadm API
Options for Highly Available Topology
Creating Highly Available Clusters with kubeadm
Set up a High Availability etcd Cluster with kubeadm
Configuring each kubelet in your cluster using kubeadm
Dual-stack support with kubeadm
Turnkey Cloud Solutions
Soluções de Nuvem Prontas para uso
Best practices
Considerations for large clusters
Running in multiple zones
Validate node setup
Enforcing Pod Security Standards
PKI certificates and requirements
Conceitos
Visão Geral
Componentes do Kubernetes
Objetos do Kubernetes
Entendendo os objetos do Kubernetes
Kubernetes Object Management
Nomes de objetos e IDs
Namespaces
Labels and Selectors
Annotations
Seletores de Campos
Finalizers
Owners and Dependents
Recommended Labels
The Kubernetes API
Arquitetura do Kubernetes
Nós
Comunicação entre Nó e Control Plane
Conceitos sobre Cloud Controller Manager
Controladores
Leases
About cgroup v2
Container Runtime Interface (CRI)
Garbage Collection
Mixed Version Proxy
Contêineres
Imagens
Ambiente de Contêiner
Classes de execução
Hooks de Ciclo de Vida do Contêiner
Workloads
Pods
Pod Lifecycle
Init Containers
Sidecar Containers
Ephemeral Containers
Disruptions
Pod Quality of Service Classes
User Namespaces
Downward API
Workload Management
Deployments
ReplicaSet
StatefulSets
DaemonSet
Jobs
Automatic Cleanup for Finished Jobs
CronJob
ReplicationController
Autoscaling Workloads
Managing Workloads
Serviços, balanceamento de carga e conectividade
Service
Ingress
Ingress Controllers
Políticas de rede
Gateway API
EndpointSlices
DNS for Services and Pods
IPv4/IPv6 dual-stack
Topology Aware Routing
Networking on Windows
Service ClusterIP allocation
Service Internal Traffic Policy
Armazenamento
Volumes
Volumes Persistentes
Projected Volumes
Ephemeral Volumes
Storage Classes
Volume Attributes Classes
Dynamic Volume Provisioning
Volume Snapshots
Volume Snapshot Classes
CSI Volume Cloning
Storage Capacity
Node-specific Volume Limits
Volume Health Monitoring
Windows Storage
Configuração
Melhores Práticas de Configuração
ConfigMaps
Secrets
Gerenciamento de recursos em Pods e contêineres
Organizando o acesso ao cluster usando arquivos kubeconfig
Gerenciamento de recursos para nós Windows
Segurança
Cloud Native Security
Visão Geral da Segurança Cloud Native
Pod Security Standards
Pod Security Admission
Service Accounts
Políticas de Segurança do Pod
Segurança para Nós Windows
Role Based Access Control Good Practices
Good practices for Kubernetes Secrets
Multi-tenancy
Hardening Guide - Authentication Mechanisms
Kubernetes API Server Bypass Risks
Security Checklist
Controlando Acesso à API do Kubernetes
Políticas
Intervalos de limite
Cotas de Recursos
Process ID Limits And Reservations
Gerenciadores de Recursos de Nós
Escalonamento, preempção e remoção
Assigning Pods to Nodes
Pod Scheduling Readiness
Pod Topology Spread Constraints
Taints e Tolerâncias
Escalonador do Kubernetes
Sobrecarga de Pod
Scheduling Framework
Dynamic Resource Allocation
Scheduler Performance Tuning
Resource Bin Packing
Pod Priority and Preemption
Node-pressure Eviction
API-initiated Eviction
Administração de Cluster
Visão Geral da Administração de Cluster
Certificates
Conectividade do Cluster
Arquitetura de Log
Logs de Sistema
Métricas para componentes do sistema Kubernetes
Configurando o Garbage Collection do kubelet
Metrics for Kubernetes Object States
Proxies no Kubernetes
Traces For Kubernetes System Components
Cluster Autoscaling
Instalando Complementos
Prioridade e imparcialidade da API
Extendendo o Kubernetes
Extendendo a API do Kubernetes
Custom Resources
Extendendo a API do Kubernetes com a camada de agregação
Extensões de Computação, armazenamento e redes
Plugins de rede
Device Plugins
Padrão Operador
Windows in Kubernetes
Windows containers in Kubernetes
Guide for Running Windows Containers in Kubernetes
Tarefas
Instale as ferramentas
Instale e configure o kubectl no Linux
Install and Set Up kubectl on macOS
Install and Set Up kubectl on Windows
Administer a Cluster
Administration with kubeadm
Certificate Management with kubeadm
Configuring a cgroup driver
Reconfiguring a kubeadm cluster
Upgrading kubeadm clusters
Upgrading Linux nodes
Upgrading Windows nodes
Changing The Kubernetes Package Repository
Migrating from dockershim
Changing the Container Runtime on a Node from Docker Engine to containerd
Migrate Docker Engine nodes from dockershim to cri-dockerd
Find Out What Container Runtime is Used on a Node
Troubleshooting CNI plugin-related errors
Check whether dockershim removal affects you
Migrating telemetry and security agents from dockershim
Generate Certificates Manually
Manage Memory, CPU, and API Resources
Configure Default Memory Requests and Limits for a Namespace
Configure Default CPU Requests and Limits for a Namespace
Configure Minimum and Maximum Memory Constraints for a Namespace
Configure Minimum and Maximum CPU Constraints for a Namespace
Configure Memory and CPU Quotas for a Namespace
Configure a Pod Quota for a Namespace
Install a Network Policy Provider
Use Antrea for NetworkPolicy
Use Calico for NetworkPolicy
Use Cilium for NetworkPolicy
Use Kube-router for NetworkPolicy
Romana for NetworkPolicy
Weave Net for NetworkPolicy
Access Clusters Using the Kubernetes API
Advertise Extended Resources for a Node
Autoscale the DNS Service in a Cluster
Change the Access Mode of a PersistentVolume to ReadWriteOncePod
Change the default StorageClass
Switching from Polling to CRI Event-based Updates to Container Status
Change the Reclaim Policy of a PersistentVolume
Cloud Controller Manager Administration
Configure a kubelet image credential provider
Configure Quotas for API Objects
Control CPU Management Policies on the Node
Control Topology Management Policies on a node
Customizing DNS Service
Debugging DNS Resolution
Declare Network Policy
Developing Cloud Controller Manager
Enable Or Disable A Kubernetes API
Encrypting Confidential Data at Rest
Decrypt Confidential Data that is Already Encrypted at Rest
Guaranteed Scheduling For Critical Add-On Pods
IP Masquerade Agent User Guide
Limit Storage Consumption
Migrate Replicated Control Plane To Use Cloud Controller Manager
Namespaces Walkthrough
Operating etcd clusters for Kubernetes
Reserve Compute Resources for System Daemons
Running Kubernetes Node Components as a Non-root User
Safely Drain a Node
Securing a Cluster
Set Kubelet Parameters Via A Configuration File
Share a Cluster with Namespaces
Upgrade A Cluster
Use Cascading Deletion in a Cluster
Using a KMS provider for data encryption
Using CoreDNS for Service Discovery
Using NodeLocal DNSCache in Kubernetes Clusters
Using sysctls in a Kubernetes Cluster
Utilizing the NUMA-aware Memory Manager
Verify Signed Kubernetes Artifacts
Gerenciando Secrets
Gerenciando Secret usando kubectl
Gerenciando Secret usando Arquivo de Configuração
Gerenciando Secret usando Kustomize
Configurar Pods e Contêineres
Assign Memory Resources to Containers and Pods
Assign CPU Resources to Containers and Pods
Configurando GMSA Para Pods e Contêineres Windows
Configurando RunAsUserName Para Pods e Contêineres Windows
Configurando Qualidade do Serviço Para Pods
Resize CPU and Memory Resources assigned to Containers
Atribuindo Recursos Estendidos a um Contêiner
Configurando um Pod Para Usar um Volume Para Armazenamento
Create a Windows HostProcess Pod
Configurando um Pod Para Usar um Volume Persistente Para armazenamento
Configure a Pod to Use a Projected Volume for Storage
Configure a Security Context for a Pod or Container
Atribuindo Pods aos Nós
Configure Service Accounts for Pods
Pull an Image from a Private Registry
Configure Liveness, Readiness and Startup Probes
Configurando um Pod Para Usar um ConfigMap
Assign Pods to Nodes using Node Affinity
Compartilhando o Namespace de Processo Entre Contêineres em um Pod
Configure Pod Initialization
Criando Pods Estáticos
Attach Handlers to Container Lifecycle Events
Use a User Namespace With a Pod
Translate a Docker Compose File to Kubernetes Resources
Migrate from PodSecurityPolicy to the Built-In PodSecurity Admission Controller
Aplicando os Padrões de Segurança do Pod Através da Configuração do Controlador de Admissão Embutido
Aplicando Padrões de Segurança de Pod com `Labels` em Namespace
Utilize o Cilium para NetworkPolicy
Depurando Contêineres de Inicialização
Monitoring, Logging, and Debugging
Troubleshooting Applications
Debug Pods
Debug Services
Debug a StatefulSet
Determine the Reason for Pod Failure
Debug Init Containers
Debug Running Pods
Get a Shell to a Running Container
Troubleshooting Clusters
Troubleshooting kubectl
Resource metrics pipeline
Tools for Monitoring Resources
Monitor Node Health
Debugging Kubernetes nodes with crictl
Auditing
Debugging Kubernetes Nodes With Kubectl
Developing and debugging services locally using telepresence
Windows debugging tips
Manage Kubernetes Objects
Declarative Management of Kubernetes Objects Using Configuration Files
Declarative Management of Kubernetes Objects Using Kustomize
Managing Kubernetes Objects Using Imperative Commands
Imperative Management of Kubernetes Objects Using Configuration Files
Update API Objects in Place Using kubectl patch
Migrate Kubernetes Objects Using Storage Version Migration
Acessando Aplicações em um Cluster
Deploy and Access the Kubernetes Dashboard
Acessando clusters
Configurar o acesso a múltiplos clusters
Use o redirecionamento de porta para acessar aplicativos em um cluster.
Use a Service to Access an Application in a Cluster
Conectando um Frontend a um Backend usando Serviços
Create an External Load Balancer
List All Container Images Running in a Cluster
Comunicação entre contêineres no mesmo pod usando um volume compartilhado
Configurando o Ingress no Minikube com o NGINX Ingress Controller Config
Configurar DNS em um cluster
Acessando serviços em execução em clusters
Inject Data Into Applications
Define a Command and Arguments for a Container
Define Dependent Environment Variables
Define Environment Variables for a Container
Expose Pod Information to Containers Through Environment Variables
Expose Pod Information to Containers Through Files
Distribute Credentials Securely Using Secrets
Run Applications
Run a Stateless Application Using a Deployment
Run a Single-Instance Stateful Application
Run a Replicated Stateful Application
Scale a StatefulSet
Delete a StatefulSet
Force Delete StatefulSet Pods
Horizontal Pod Autoscaling
HorizontalPodAutoscaler Walkthrough
Specifying a Disruption Budget for your Application
Accessing the Kubernetes API from a Pod
Run Jobs
Running Automated Tasks with a CronJob
Coarse Parallel Processing Using a Work Queue
Fine Parallel Processing Using a Work Queue
Indexed Job for Parallel Processing with Static Work Assignment
Job with Pod-to-Pod Communication
Parallel Processing using Expansions
Handling retriable and non-retriable pod failures with Pod failure policy
Extend Kubernetes
Configure the Aggregation Layer
Use Custom Resources
Extend the Kubernetes API with CustomResourceDefinitions
Versions in CustomResourceDefinitions
Set up an Extension API Server
Configure Multiple Schedulers
Use an HTTP Proxy to Access the Kubernetes API
Use a SOCKS5 Proxy to Access the Kubernetes API
Set up Konnectivity service
Configurar um provedor de credenciais de imagem para o kubelet
TLS
Configure Certificate Rotation for the Kubelet
Manage TLS Certificates in a Cluster
Manual Rotation of CA Certificates
Manage Cluster Daemons
Perform a Rolling Update on a DaemonSet
Perform a Rollback on a DaemonSet
Running Pods on Only Some Nodes
Networking
Adding entries to Pod /etc/hosts with HostAliases
Extend Service IP Ranges
Validate IPv4/IPv6 dual-stack
Limitar o consumo de armazenamento
Extend kubectl with plugins
Manage HugePages
Personalizando o Serviço DNS
Schedule GPUs
Tutoriais
Olá, Minikube!
Aprenda as noções básicas do Kubernetes
Crie um Cluster
Usando Minikube para criar um cluster
Implantar um aplicativo
Usando kubectl para criar um Deployment
Explore seu aplicativo
Visualizando Pods e Nós
Exponha publicamente seu aplicativo
Utilizando um serviço para expor seu aplicativo
Escale seu aplicativo
Executando Múltiplas Instâncias da sua Aplicação
Tutorial Interativo - Escalando seu aplicativo
Update Your App
Performing a Rolling Update
Configuration
Example: Configuring a Java Microservice
Externalizing config using MicroProfile, ConfigMaps and Secrets
Configuring Redis using a ConfigMap
Security
Apply Pod Security Standards at the Cluster Level
Apply Pod Security Standards at the Namespace Level
Restrict a Container's Access to Resources with AppArmor
Restrict a Container's Syscalls with seccomp
Stateless Applications
Exposing an External IP Address to Access an Application in a Cluster
Example: Deploying PHP Guestbook application with Redis
Stateful Applications
StatefulSet Basics
Example: Deploying WordPress and MySQL with Persistent Volumes
Example: Deploying Cassandra with a StatefulSet
Running ZooKeeper, A Distributed System Coordinator
Services
Connecting Applications with Services
Using Source IP
Explore Termination Behavior for Pods And Their Endpoints
Referência
Glossário
Autenticação
API Overview
Kubernetes API Concepts
Server-Side Apply
Client Libraries
Common Expression Language in Kubernetes
Kubernetes Deprecation Policy
Deprecated API Migration Guide
Kubernetes API health endpoints
Autenticando com Tokens de Inicialização
API Access Control
Authenticating
Authenticating with Bootstrap Tokens
Certificates and Certificate Signing Requests
Admission Controllers
Dynamic Admission Control
Managing Service Accounts
Authorization Overview
Using RBAC Authorization
Using ABAC Authorization
Using Node Authorization
Mapping PodSecurityPolicies to Pod Security Standards
Webhook Mode
Kubelet authentication/authorization
TLS bootstrapping
Validating Admission Policy
Well-Known Labels, Annotations and Taints
Audit Annotations
Ferramentas de Configuração
Kubeadm
kubeadm init
kubeadm join
kubeadm upgrade
kubeadm config
kubeadm reset
kubeadm token
kubeadm version
kubeadm alpha
kubeadm certs
kubeadm init phase
kubeadm join phase
kubeadm kubeconfig
kubeadm reset phase
kubeadm upgrade phase
Implementation details
Kubernetes API
Workload Resources
Pod
PodTemplate
ReplicationController
ReplicaSet
Deployment
StatefulSet
ControllerRevision
DaemonSet
Job
CronJob
HorizontalPodAutoscaler
HorizontalPodAutoscaler
PriorityClass
PodSchedulingContext v1alpha2
ResourceClaim v1alpha2
ResourceClaimTemplate v1alpha2
ResourceClass v1alpha2
Service Resources
Service
Endpoints
EndpointSlice
Ingress
IngressClass
Config and Storage Resources
ConfigMap
Secret
Volume
PersistentVolumeClaim
PersistentVolume
StorageClass
VolumeAttachment
CSIDriver
CSINode
CSIStorageCapacity
Authentication Resources
ServiceAccount
TokenRequest
TokenReview
CertificateSigningRequest
ClusterTrustBundle v1alpha1
SelfSubjectReview
Authorization Resources
LocalSubjectAccessReview
SelfSubjectAccessReview
SelfSubjectRulesReview
SubjectAccessReview
ClusterRole
ClusterRoleBinding
Role
RoleBinding
Policy Resources
LimitRange
ResourceQuota
NetworkPolicy
PodDisruptionBudget
IPAddress v1alpha1
Extend Resources
CustomResourceDefinition
MutatingWebhookConfiguration
ValidatingWebhookConfiguration
ValidatingAdmissionPolicy v1beta1
Cluster Resources
Node
Namespace
Event
APIService
Lease
RuntimeClass
FlowSchema v1beta3
PriorityLevelConfiguration v1beta3
Binding
ComponentStatus
ClusterCIDR v1alpha1
Common Definitions
DeleteOptions
LabelSelector
ListMeta
LocalObjectReference
NodeSelectorRequirement
ObjectFieldSelector
ObjectMeta
ObjectReference
Patch
Quantity
ResourceFieldSelector
Status
TypedLocalObjectReference
Other Resources
ValidatingAdmissionPolicyBindingList v1beta1
Common Parameters
Portas e protocolos
Instrumentation
Service Level Indicator Metrics
CRI Pod & Container Metrics
Node metrics data
Kubernetes Metrics Reference
kubectl CLI
Introduction To Kubectl
kubectl Quick Reference
kubectl reference
kubectl
kubectl annotate
kubectl api-resources
kubectl api-versions
kubectl apply
kubectl apply edit-last-applied
kubectl apply set-last-applied
kubectl apply view-last-applied
kubectl attach
kubectl auth
kubectl auth can-i
kubectl auth reconcile
kubectl auth whoami
kubectl autoscale
kubectl certificate
kubectl certificate approve
kubectl certificate deny
kubectl cluster-info
kubectl cluster-info dump
kubectl completion
kubectl config
kubectl config current-context
kubectl config delete-cluster
kubectl config delete-context
kubectl config delete-user
kubectl config get-clusters
kubectl config get-contexts
kubectl config get-users
kubectl config rename-context
kubectl config set
kubectl config set-cluster
kubectl config set-context
kubectl config set-credentials
kubectl config unset
kubectl config use-context
kubectl config view
kubectl cordon
kubectl cp
kubectl create
kubectl create clusterrole
kubectl create clusterrolebinding
kubectl create configmap
kubectl create cronjob
kubectl create deployment
kubectl create ingress
kubectl create job
kubectl create namespace
kubectl create poddisruptionbudget
kubectl create priorityclass
kubectl create quota
kubectl create role
kubectl create rolebinding
kubectl create secret
kubectl create secret docker-registry
kubectl create secret generic
kubectl create secret tls
kubectl create service
kubectl create service clusterip
kubectl create service externalname
kubectl create service loadbalancer
kubectl create service nodeport
kubectl create serviceaccount
kubectl create token
kubectl debug
kubectl delete
kubectl describe
kubectl diff
kubectl drain
kubectl edit
kubectl events
kubectl exec
kubectl explain
kubectl expose
kubectl get
kubectl kustomize
kubectl label
kubectl logs
kubectl options
kubectl patch
kubectl plugin
kubectl plugin list
kubectl port-forward
kubectl proxy
kubectl replace
kubectl rollout
kubectl rollout history
kubectl rollout pause
kubectl rollout restart
kubectl rollout resume
kubectl rollout status
kubectl rollout undo
kubectl run
kubectl scale
kubectl set
kubectl set env
kubectl set image
kubectl set resources
kubectl set selector
kubectl set serviceaccount
kubectl set subject
kubectl taint
kubectl top
kubectl top node
kubectl top pod
kubectl uncordon
kubectl version
kubectl wait
kubectl Commands
kubectl
JSONPath Support
kubectl for Docker Users
kubectl Usage Conventions
kubectl Cheat Sheet
Visão Geral de Autorização
Problemas e Alertas de Segurança do Kubernetes
Rastreador de Issue Kubernetes
Kubernetes Security and Disclosure Information
Feed Oficial de CVE
Node Reference Information
Kubelet Checkpoint API
Articles on dockershim Removal and on Using CRI-compatible Runtimes
Node Labels Populated By The Kubelet
Kubelet Configuration Directory Merging
Kubelet Device Manager API Versions
Node Status
Utilizando Autorização ABAC
Networking Reference
Protocols for Services
Ports and Protocols
Virtual IPs and Service Proxies
Component tools
Feature Gates
Feature Gates (removed)
kubelet
kube-apiserver
kube-controller-manager
kube-proxy
kube-scheduler
Debug cluster
Flow control
Configuration APIs
Client Authentication (v1)
Client Authentication (v1beta1)
Event Rate Limit Configuration (v1alpha1)
Image Policy API (v1alpha1)
kube-apiserver Admission (v1)
kube-apiserver Audit Configuration (v1)
kube-apiserver Configuration (v1)
kube-apiserver Configuration (v1alpha1)
kube-apiserver Configuration (v1beta1)
kube-apiserver Encryption Configuration (v1)
kube-controller-manager Configuration (v1alpha1)
kube-proxy Configuration (v1alpha1)
kube-scheduler Configuration (v1)
kubeadm Configuration (v1beta3)
kubeadm Configuration (v1beta4)
kubeconfig (v1)
Kubelet Configuration (v1)
Kubelet Configuration (v1alpha1)
Kubelet Configuration (v1beta1)
Kubelet CredentialProvider (v1)
WebhookAdmission Configuration (v1)
External APIs
Kubernetes Custom Metrics (v1beta2)
Kubernetes External Metrics (v1beta1)
Kubernetes Metrics (v1beta1)
Scheduling
Scheduler Configuration
Scheduling Policies
Other Tools
Mapping from dockercli to crictl
Ferramentas
Contribuir
Contribute to Kubernetes Documentation
Suggesting content improvements
Contributing new content
Opening a pull request
Documenting for a release
Blogs and case studies
Revisando mudanças
Revisando pull requests
For approvers and reviewers
Localizing Kubernetes documentation
Participating in SIG Docs
Roles and responsibilities
Issue Wranglers
PR wranglers
Updating Reference Documentation
Quickstart
Contributing to the Upstream Kubernetes Code
Generating Reference Documentation for the Kubernetes API
Generating Reference Documentation for kubectl Commands
Generating Reference Documentation for Metrics
Generating Reference Pages for Kubernetes Components and Tools
Visão geral do estilo da documentação
Guia de conteúdo
Guia de estilo
Diagram guide
Writing a new topic
Page content types
Content organization
Custom Hugo Shortcodes
Advanced contributing
Visualizando Analytics do Site
Docs smoke test page
(EN)
Resultados da pesquisa
Documentação
Referência
Problemas e Alertas de Segurança do Kubernetes
Problemas e Alertas de Segurança do Kubernetes
Rastreador de Issue Kubernetes
Feed Oficial de CVE
Última modificação November 29, 2022 at 10:26 AM PST:
fixing the title, changing the weight and removing toc-hide (6f0cb78cf0)
Editar essa página
Criar uma subpágina
Abra um bug
Imprimir toda essa seção