Tweak kubelet config comments for consistency and readability

staging/src/k8s.io/kubelet/config/v1beta1/types.go

@@ -178,14 +178,14 @@ type KubeletConfiguration struct {
 	// Default: ""
 	// +optional
 	TLSPrivateKeyFile string `json:"tlsPrivateKeyFile,omitempty"`
-	// TLSCipherSuites is the list of allowed cipher suites for the server.
+	// tlsCipherSuites is the list of allowed cipher suites for the server.
 	// Values are from tls package constants (https://golang.org/pkg/crypto/tls/#pkg-constants).
 	// Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
 	// it may disrupt components that interact with the Kubelet server.
 	// Default: nil
 	// +optional
 	TLSCipherSuites []string `json:"tlsCipherSuites,omitempty"`
-	// TLSMinVersion is the minimum TLS version supported.
+	// tlsMinVersion is the minimum TLS version supported.
 	// Values are from tls package constants (https://golang.org/pkg/crypto/tls/#pkg-constants).
 	// Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
 	// it may disrupt components that interact with the Kubelet server.
@@ -397,7 +397,8 @@ type KubeletConfiguration struct {
 	// Default: 80
 	// +optional
 	ImageGCLowThresholdPercent *int32 `json:"imageGCLowThresholdPercent,omitempty"`
-	// How frequently to calculate and cache volume disk usage for all pods
+	// volumeStatsAggPeriod is the frequency for calculating and caching volume
+	// disk usage for all pods.
 	// Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
 	// shortening the period may carry a performance impact.
 	// Default: "1m"
@@ -425,50 +426,65 @@ type KubeletConfiguration struct {
 	// Default: ""
 	// +optional
 	CgroupRoot string `json:"cgroupRoot,omitempty"`
-	// Enable QoS based Cgroup hierarchy: top level cgroups for QoS Classes
+	// cgroupsPerQOS enable QoS based CGroup hierarchy: top level CGroups for QoS classes
-	// and all Burstable and BestEffort pods are brought up under their
+	// and all Burstable and BestEffort Pods are brought up under their specific top level
-	// specific top level QoS cgroup.
+	// QoS CGroup.
 	// Dynamic Kubelet Config (beta): This field should not be updated without a full node
 	// reboot. It is safest to keep this value the same as the local config.
 	// Default: true
 	// +optional
 	CgroupsPerQOS *bool `json:"cgroupsPerQOS,omitempty"`
-	// driver that the kubelet uses to manipulate cgroups on the host (cgroupfs or systemd)
+	// cgroupDriver is the driver kubelet uses to manipulate CGroups on the host (cgroupfs
+	// or systemd).
 	// Dynamic Kubelet Config (beta): This field should not be updated without a full node
 	// reboot. It is safest to keep this value the same as the local config.
 	// Default: "cgroupfs"
 	// +optional
 	CgroupDriver string `json:"cgroupDriver,omitempty"`
-	// CPUManagerPolicy is the name of the policy to use.
+	// cpuManagerPolicy is the name of the policy to use.
 	// Requires the CPUManager feature gate to be enabled.
 	// Dynamic Kubelet Config (beta): This field should not be updated without a full node
 	// reboot. It is safest to keep this value the same as the local config.
 	// Default: "None"
 	// +optional
 	CPUManagerPolicy string `json:"cpuManagerPolicy,omitempty"`
-	// CPU Manager reconciliation period.
+	// cpuManagerReconcilePeriod is the reconciliation period for the CPU Manager.
 	// Requires the CPUManager feature gate to be enabled.
 	// Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
 	// shortening the period may carry a performance impact.
 	// Default: "10s"
 	// +optional
 	CPUManagerReconcilePeriod metav1.Duration `json:"cpuManagerReconcilePeriod,omitempty"`
-	// MemoryManagerPolicy is the name of the policy to use by memory manager.
+	// memoryManagerPolicy is the name of the policy to use by memory manager.
 	// Requires the MemoryManager feature gate to be enabled.
 	// Dynamic Kubelet Config (beta): This field should not be updated without a full node
 	// reboot. It is safest to keep this value the same as the local config.
 	// Default: "none"
 	// +optional
 	MemoryManagerPolicy string `json:"memoryManagerPolicy,omitempty"`
-	// TopologyManagerPolicy is the name of the topology manager policy to use.
+	// topologyManagerPolicy is the name of the topology manager policy to use.
+	// Valid values include:
+	//
+	// - `restricted`: kubelet only allows pods with optimal NUMA node alignment for
+	//   requested resources;
+	// - `best-effort`: kubelet will favor pods with NUMA alignment of CPU and device
+	//   resources;
+	// - `none`: kublet has no knowledge of NUMA alignment of a pod's CPU and device resources.
+	// - `single-numa-node`: kubelet only allows pods with a single NUMA alignment
+	//   of CPU and device resources.
+	//
 	// Policies other than "none" require the TopologyManager feature gate to be enabled.
 	// Dynamic Kubelet Config (beta): This field should not be updated without a full node
 	// reboot. It is safest to keep this value the same as the local config.
 	// Default: "none"
 	// +optional
 	TopologyManagerPolicy string `json:"topologyManagerPolicy,omitempty"`
-	// TopologyManagerScope represents the scope of topology hint generation
+	// topologyManagerScope represents the scope of topology hint generation
-	// that topology manager requests and hint providers generate.
+	// that topology manager requests and hint providers generate. Valid values include:
+	//
+	// - `container`: topology policy is applied on a per-container basis.
+	// - `pod`: topology policy is applied on a per-pod basis.
+	//
 	// "pod" scope requires the TopologyManager feature gate to be enabled.
 	// Default: "container"
 	// +optional
@@ -499,7 +515,7 @@ type KubeletConfiguration struct {
 	// - "hairpin-veth":       set the hairpin flag on container veth interfaces.
 	// - "none":               do nothing.
 	//
-	// Generally, one must set --hairpin-mode=hairpin-veth to achieve hairpin NAT,
+	// Generally, one must set `--hairpin-mode=hairpin-veth to` achieve hairpin NAT,
 	// because promiscuous-bridge assumes the existence of a container bridge named cbr0.
 	// Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
 	// it may require a node reboot, depending on the network plugin.
@@ -516,20 +532,20 @@ type KubeletConfiguration struct {
 	// Default: 110
 	// +optional
 	MaxPods int32 `json:"maxPods,omitempty"`
-	// The CIDR to use for pod IP addresses, only used in standalone mode.
+	// podCIDR is the CIDR to use for pod IP addresses, only used in standalone mode.
-	// In cluster mode, this is obtained from the master.
+	// In cluster mode, this is obtained from the control plane.
 	// Dynamic Kubelet Config (beta): This field should always be set to the empty default.
 	// It should only set for standalone Kubelets, which cannot use Dynamic Kubelet Config.
 	// Default: ""
 	// +optional
 	PodCIDR string `json:"podCIDR,omitempty"`
-	// PodPidsLimit is the maximum number of pids in any pod.
+	// podPidsLimit is the maximum number of PIDs in any pod.
 	// Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
 	// lowering it may prevent container processes from forking after the change.
 	// Default: -1
 	// +optional
 	PodPidsLimit *int64 `json:"podPidsLimit,omitempty"`
-	// ResolverConfig is the resolver configuration file used as the basis
+	// resolvConf is the resolver configuration file used as the basis
 	// for the container DNS resolution configuration.
 	// Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
 	// changes will only take effect on Pods created after the update. Draining
@@ -537,7 +553,7 @@ type KubeletConfiguration struct {
 	// Default: "/etc/resolv.conf"
 	// +optional
 	ResolverConfig string `json:"resolvConf,omitempty"`
-	// RunOnce causes the Kubelet to check the API server once for pods,
+	// runOnce causes the Kubelet to check the API server once for pods,
 	// run those in addition to the pods specified by static pod files, and exit.
 	// Default: false
 	// +optional
@@ -549,7 +565,7 @@ type KubeletConfiguration struct {
 	// Default: true
 	// +optional
 	CPUCFSQuota *bool `json:"cpuCFSQuota,omitempty"`
-	// CPUCFSQuotaPeriod is the CPU CFS quota period value, `cpu.cfs_period_us`.
+	// cpuCFSQuotaPeriod is the CPU CFS quota period value, `cpu.cfs_period_us`.
 	// The value must be between 1 us and 1 second, inclusive.
 	// Requires the CustomCPUCFSQuotaPeriod feature gate to be enabled.
 	// Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
@@ -605,7 +621,8 @@ type KubeletConfiguration struct {
 	// Default: true
 	// +optional
 	SerializeImagePulls *bool `json:"serializeImagePulls,omitempty"`
-	// Map of signal names to quantities that defines hard eviction thresholds. For example: {"memory.available": "300Mi"}.
+	// evictionHard is a map of signal names to quantities that defines hard eviction
+	// thresholds. For example: `{"memory.available": "300Mi"}`.
 	// To explicitly disable, pass a 0% or 100% threshold on an arbitrary resource.
 	// Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
 	// it may trigger or delay Pod evictions.
@@ -616,30 +633,31 @@ type KubeletConfiguration struct {
 	//   imagefs.available: "15%"
 	// +optional
 	EvictionHard map[string]string `json:"evictionHard,omitempty"`
-	// Map of signal names to quantities that defines soft eviction thresholds.
+	// evictionSoft is a map of signal names to quantities that defines soft eviction thresholds.
-	// For example: {"memory.available": "300Mi"}.
+	// For example: `{"memory.available": "300Mi"}`.
 	// Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
 	// it may trigger or delay Pod evictions, and may change the allocatable reported
 	// by the node.
 	// Default: nil
 	// +optional
 	EvictionSoft map[string]string `json:"evictionSoft,omitempty"`
-	// Map of signal names to quantities that defines grace periods for each soft eviction signal.
+	// evictionSoftGracePeriod is a map of signal names to quantities that defines grace
-	// For example: {"memory.available": "30s"}.
+	// periods for each soft eviction signal. For example: `{"memory.available": "30s"}`.
 	// Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
 	// it may trigger or delay Pod evictions.
 	// Default: nil
 	// +optional
 	EvictionSoftGracePeriod map[string]string `json:"evictionSoftGracePeriod,omitempty"`
-	// Duration for which the kubelet has to wait before transitioning out of an eviction pressure condition.
+	// evictionPressureTransitionPeriod is the duration for which the kubelet has to wait
+	// before transitioning out of an eviction pressure condition.
 	// Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
 	// lowering it may decrease the stability of the node when the node is overcommitted.
 	// Default: "5m"
 	// +optional
 	EvictionPressureTransitionPeriod metav1.Duration `json:"evictionPressureTransitionPeriod,omitempty"`
-	// Maximum allowed grace period (in seconds) to use when terminating pods in
+	// evictionMaxPodGracePeriod is the maximum allowed grace period (in seconds) to use
-	// response to a soft eviction threshold being met. This value effectively caps
+	// when terminating pods in response to a soft eviction threshold being met. This value
-	// the Pod's TerminationGracePeriodSeconds value during soft evictions.
+	// effectively caps the Pod's terminationGracePeriodSeconds value during soft evictions.
 	// Note: Due to issue #64530, the behavior has a bug where this value currently just
 	// overrides the grace period during soft eviction, which can increase the grace
 	// period from what is set on the Pod. This bug will be fixed in a future release.
@@ -649,9 +667,10 @@ type KubeletConfiguration struct {
 	// Default: 0
 	// +optional
 	EvictionMaxPodGracePeriod int32 `json:"evictionMaxPodGracePeriod,omitempty"`
-	// Map of signal names to quantities that defines minimum reclaims, which describe the minimum
+	// evictionMinimumReclaim is a map of signal names to quantities that defines minimum reclaims,
-	// amount of a given resource the kubelet will reclaim when performing a pod eviction while
+	// which describe the minimum amount of a given resource the kubelet will reclaim when
-	// that resource is under pressure. For example: {"imagefs.available": "2Gi"}
+	// performing a pod eviction while that resource is under pressure.
+	// For example: `{"imagefs.available": "2Gi"}`.
 	// Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
 	// it may change how well eviction can manage resource pressure.
 	// Default: nil
@@ -689,15 +708,16 @@ type KubeletConfiguration struct {
 	// Default: false
 	// +optional
 	ProtectKernelDefaults bool `json:"protectKernelDefaults,omitempty"`
-	// If true, Kubelet ensures a set of iptables rules are present on host.
+	// makeIPTablesUtilChains, if true, causes the Kubelet ensures a set of iptables rules
-	// These rules will serve as utility rules for various components, e.g. KubeProxy.
+	// are present on host.
-	// The rules will be created based on IPTablesMasqueradeBit and IPTablesDropBit.
+	// These rules will serve as utility rules for various components, e.g. kube-proxy.
+	// The rules will be created based on iptablesMasqueradeBit and iptablesDropBit.
 	// Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
 	// disabling it will prevent the Kubelet from healing locally misconfigured iptables rules.
 	// Default: true
 	// +optional
 	MakeIPTablesUtilChains *bool `json:"makeIPTablesUtilChains,omitempty"`
-	// iptablesMasqueradeBit is the bit of the iptables fwmark space to mark for SNAT
+	// iptablesMasqueradeBit is the bit of the iptables fwmark space to mark for SNAT.
 	// Values must be within the range [0, 31]. Must be different from other mark bits.
 	// Warning: Please match the value of the corresponding parameter in kube-proxy.
 	// TODO: clean up IPTablesMasqueradeBit in kube-proxy
@@ -715,7 +735,7 @@ type KubeletConfiguration struct {
 	// Default: 15
 	// +optional
 	IPTablesDropBit *int32 `json:"iptablesDropBit,omitempty"`
-	// featureGates is a map of feature names to bools that enable or disable alpha/experimental
+	// featureGates is a map of feature names to bools that enable or disable experimental
 	// features. This field modifies piecemeal the built-in default values from
 	// "k8s.io/kubernetes/pkg/features/kube_features.go".
 	// Dynamic Kubelet Config (beta): If dynamically updating this field, consider the
@@ -732,21 +752,27 @@ type KubeletConfiguration struct {
 	// Default: true
 	// +optional
 	FailSwapOn *bool `json:"failSwapOn,omitempty"`
-	// A quantity defines the maximum size of the container log file before it is rotated.
+	// containerLogMaxSize is a quantity defining the maximum size of the container log
-	// For example: "5Mi" or "256Ki".
+	// file before it is rotated. For example: "5Mi" or "256Ki".
 	// Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
 	// it may trigger log rotation.
 	// Default: "10Mi"
 	// +optional
 	ContainerLogMaxSize string `json:"containerLogMaxSize,omitempty"`
-	// Maximum number of container log files that can be present for a container.
+	// containerLogMaxFiles specifies the maximum number of container log files that can
+	// be present for a container.
 	// Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
 	// lowering it may cause log files to be deleted.
 	// Default: 5
 	// +optional
 	ContainerLogMaxFiles *int32 `json:"containerLogMaxFiles,omitempty"`
-	// ConfigMapAndSecretChangeDetectionStrategy is a mode in which
+	// configMapAndSecretChangeDetectionStrategy is a mode in which ConfigMap and Secret
-	// config map and secret managers are running.
+	// managers are running. Valid values include:
+	//
+	// - `Get`: kubelet fetches necessary objects directly from the API server;
+	// - `Cache`: kubelet uses TTL cache for object fetched from the API server;
+	// - `Watch`: kubelet uses watches to observe changes to objects that are in its interest.
+	//
 	// Default: "Watch"
 	// +optional
 	ConfigMapAndSecretChangeDetectionStrategy ResourceChangeDetectionStrategy `json:"configMapAndSecretChangeDetectionStrategy,omitempty"`
@@ -764,10 +790,11 @@ type KubeletConfiguration struct {
 	// Default: nil
 	// +optional
 	SystemReserved map[string]string `json:"systemReserved,omitempty"`
-	// A set of ResourceName=ResourceQuantity (e.g. cpu=200m,memory=150G) pairs
+	// kubeReserved is a set of ResourceName=ResourceQuantity (e.g. cpu=200m,memory=150G) pairs
 	// that describe resources reserved for kubernetes system components.
 	// Currently cpu, memory and local storage for root file system are supported.
-	// See http://kubernetes.io/docs/user-guide/compute-resources for more detail.
+	// See https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
+	// for more details.
 	// Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
 	// it may not be possible to increase the reserved resources, because this
 	// requires resizing cgroups. Always look for a NodeAllocatableEnforced event
@@ -778,20 +805,20 @@ type KubeletConfiguration struct {
 	// The reservedSystemCPUs option specifies the CPU list reserved for the host
 	// level system threads and kubernetes related threads. This provide a "static"
 	// CPU list rather than the "dynamic" list by systemReserved and kubeReserved.
-	// This option overwrites CPUs provided by systemReserved and kubeReserved.
 	// This option does not support systemReservedCgroup or kubeReservedCgroup.
 	ReservedSystemCPUs string `json:"reservedSystemCPUs,omitempty"`
-	// The previous version for which you want to show hidden metrics.
+	// showHiddenMetricsForVersion is the previous version for which you want to show
+	// hidden metrics.
 	// Only the previous minor version is meaningful, other values will not be allowed.
-	// The format is `<major>.<minor>`, e.g.: '1.16'.
+	// The format is `<major>.<minor>`, e.g.: `1.16`.
 	// The purpose of this format is make sure you have the opportunity to notice
 	// if the next release hides additional metrics, rather than being surprised
 	// when they are permanently removed in the release after that.
 	// Default: ""
 	// +optional
 	ShowHiddenMetricsForVersion string `json:"showHiddenMetricsForVersion,omitempty"`
-	// This flag helps kubelet identify absolute name of top level cgroup used to
+	// systemReservedCgroup helps the kubelet identify absolute name of top level CGroup used
-	// enforce `SystemReserved` compute resource reservation for OS system daemons.
+	// to enforce `systemReserved` compute resource reservation for OS system daemons.
 	// Refer to [Node Allocatable](https://git.k8s.io/community/contributors/design-proposals/node/node-allocatable.md)
 	// doc for more information.
 	// Dynamic Kubelet Config (beta): This field should not be updated without a full node
@@ -799,8 +826,8 @@ type KubeletConfiguration struct {
 	// Default: ""
 	// +optional
 	SystemReservedCgroup string `json:"systemReservedCgroup,omitempty"`
-	// This flag helps kubelet identify absolute name of top level cgroup used to
+	// kubeReservedCgroup helps the kubelet identify absolute name of top level CGroup used
-	// enforce `KubeReserved` compute resource reservation for Kubernetes node system daemons.
+	// to enforce `KubeReserved` compute resource reservation for Kubernetes node system daemons.
 	// Refer to [Node Allocatable](https://git.k8s.io/community/contributors/design-proposals/node/node-allocatable.md)
 	// doc for more information.
 	// Dynamic Kubelet Config (beta): This field should not be updated without a full node
@@ -826,10 +853,9 @@ type KubeletConfiguration struct {
 	// Default: ["pods"]
 	// +optional
 	EnforceNodeAllocatable []string `json:"enforceNodeAllocatable,omitempty"`
-	// A comma separated whitelist of unsafe sysctls or sysctl patterns (ending in *).
+	// A comma separated whitelist of unsafe sysctls or sysctl patterns (ending in `*`).
-	// Unsafe sysctl groups are `kernel.shm*`, `kernel.msg*`, `kernel.sem`, `fs.mqueue.*`, and `net.*`.
+	// Unsafe sysctl groups are `kernel.shm*`, `kernel.msg*`, `kernel.sem`, `fs.mqueue.*`,
-	// These sysctls are namespaced but not allowed by default.
+	// and `net.*`. For example: "`kernel.msg*,net.ipv4.route.min_pmtu`"
-	// For example: "`kernel.msg*,net.ipv4.route.min_pmtu`"
 	// Default: []
 	// +optional
 	AllowedUnsafeSysctls []string `json:"allowedUnsafeSysctls,omitempty"`
@@ -847,18 +873,18 @@ type KubeletConfiguration struct {
 	// Default: ""
 	// +optional
 	ProviderID string `json:"providerID,omitempty"`
-	// kernelMemcgNotification, if set, the kubelet will integrate with the kernel
+	// kernelMemcgNotification, if set, instructs the the kubelet to integrate with the
-	// memcg notification to determine if memory eviction thresholds are crossed
+	// kernel memcg notification for determining if memory eviction thresholds are
-	// rather than polling.
+	// exceeded rather than polling.
 	// Dynamic Kubelet Config (beta): If dynamically updating this field, consider that
 	// it may impact the way Kubelet interacts with the kernel.
 	// Default: false
 	// +optional
 	KernelMemcgNotification bool `json:"kernelMemcgNotification,omitempty"`
-	// Logging specifies the options of logging.
+	// logging specifies the options of logging.
-	// Refer [Logs Options](https://github.com/kubernetes/component-base/blob/master/logs/options.go)
+	// Refer to [Logs Options](https://github.com/kubernetes/component-base/blob/master/logs/options.go)
 	// for more information.
-	// Defaults:
+	// Default:
 	//   Format: text
 	// + optional
 	Logging componentbaseconfigv1alpha1.LoggingConfiguration `json:"logging,omitempty"`
@@ -866,30 +892,41 @@ type KubeletConfiguration struct {
 	// Default: true
 	// +optional
 	EnableSystemLogHandler *bool `json:"enableSystemLogHandler,omitempty"`
-	// ShutdownGracePeriod specifies the total duration that the node should delay the shutdown and total grace period for pod termination during a node shutdown.
+	// shutdownGracePeriod specifies the total duration that the node should delay the
+	// shutdown and total grace period for pod termination during a node shutdown.
 	// Default: "0s"
 	// +featureGate=GracefulNodeShutdown
 	// +optional
 	ShutdownGracePeriod metav1.Duration `json:"shutdownGracePeriod,omitempty"`
-	// ShutdownGracePeriodCriticalPods specifies the duration used to terminate critical pods during a node shutdown. This should be less than ShutdownGracePeriod.
+	// shutdownGracePeriodCriticalPods specifies the duration used to terminate critical
-	// For example, if ShutdownGracePeriod=30s, and ShutdownGracePeriodCriticalPods=10s, during a node shutdown the first 20 seconds would be reserved for gracefully terminating normal pods, and the last 10 seconds would be reserved for terminating critical pods.
+	// pods during a node shutdown. This should be less than shutdownGracePeriod.
+	// For example, if shutdownGracePeriod=30s, and shutdownGracePeriodCriticalPods=10s,
+	// during a node shutdown the first 20 seconds would be reserved for gracefully
+	// terminating normal pods, and the last 10 seconds would be reserved for terminating
+	// critical pods.
 	// Default: "0s"
 	// +featureGate=GracefulNodeShutdown
 	// +optional
 	ShutdownGracePeriodCriticalPods metav1.Duration `json:"shutdownGracePeriodCriticalPods,omitempty"`
-	// ReservedMemory specifies a comma-separated list of memory reservations for NUMA nodes.
+	// reservedMemory specifies a comma-separated list of memory reservations for NUMA nodes.
-	// The parameter makes sense only in the context of the memory manager feature. The memory manager will not allocate reserved memory for container workloads.
+	// The parameter makes sense only in the context of the memory manager feature.
-	// For example, if you have a NUMA0 with 10Gi of memory and the ReservedMemory was specified to reserve 1Gi of memory at NUMA0,
+	// The memory manager will not allocate reserved memory for container workloads.
-	// the memory manager will assume that only 9Gi is available for allocation.
+	// For example, if you have a NUMA0 with 10Gi of memory and the reservedMemory was
+	// specified to reserve 1Gi of memory at NUMA0, the memory manager will assume that
+	// only 9Gi is available for allocation.
 	// You can specify a different amount of NUMA node and memory types.
-	// You can omit this parameter at all, but you should be aware that the amount of reserved memory from all NUMA nodes
+	// You can omit this parameter at all, but you should be aware that the amount of
-	// should be equal to the amount of memory specified by the node allocatable features(https://kubernetes.io/docs/tasks/administer-cluster/reserve-compute-resources/#node-allocatable).
+	// reserved memory from all NUMA nodes should be equal to the amount of memory specified
-	// If at least one node allocatable parameter has a non-zero value, you will need to specify at least one NUMA node.
+	// by the [node allocatable](https://kubernetes.io/docs/tasks/administer-cluster/reserve-compute-resources/#node-allocatable).
+	// If at least one node allocatable parameter has a non-zero value, you will need
+	// to specify at least one NUMA node.
 	// Also, avoid specifying:
+	//
 	// 1. Duplicates, the same NUMA node, and memory type, but with a different value.
 	// 2. zero limits for any memory type.
 	// 3. NUMAs nodes IDs that do not exist under the machine.
 	// 4. memory types except for memory and hugepages-<size>
+	//
 	// Default: nil
 	// +optional
 	ReservedMemory []MemoryReservation `json:"reservedMemory,omitempty"`
@@ -914,7 +951,7 @@ const (
 
 type KubeletAuthorization struct {
 	// mode is the authorization mode to apply to requests to the kubelet server.
-	// Valid values are AlwaysAllow and Webhook.
+	// Valid values are `AlwaysAllow` and `Webhook`.
 	// Webhook mode uses the SubjectAccessReview API to determine authorization.
 	// +optional
 	Mode KubeletAuthorizationMode `json:"mode,omitempty"`
@@ -925,36 +962,40 @@ type KubeletAuthorization struct {
 }
 
 type KubeletWebhookAuthorization struct {
-	// cacheAuthorizedTTL is the duration to cache 'authorized' responses from the webhook authorizer.
+	// cacheAuthorizedTTL is the duration to cache 'authorized' responses from the
+	// webhook authorizer.
 	// +optional
 	CacheAuthorizedTTL metav1.Duration `json:"cacheAuthorizedTTL,omitempty"`
-	// cacheUnauthorizedTTL is the duration to cache 'unauthorized' responses from the webhook authorizer.
+	// cacheUnauthorizedTTL is the duration to cache 'unauthorized' responses from
+	// the webhook authorizer.
 	// +optional
 	CacheUnauthorizedTTL metav1.Duration `json:"cacheUnauthorizedTTL,omitempty"`
 }
 
 type KubeletAuthentication struct {
-	// x509 contains settings related to x509 client certificate authentication
+	// x509 contains settings related to x509 client certificate authentication.
 	// +optional
 	X509 KubeletX509Authentication `json:"x509"`
-	// webhook contains settings related to webhook bearer token authentication
+	// webhook contains settings related to webhook bearer token authentication.
 	// +optional
 	Webhook KubeletWebhookAuthentication `json:"webhook"`
-	// anonymous contains settings related to anonymous authentication
+	// anonymous contains settings related to anonymous authentication.
 	// +optional
 	Anonymous KubeletAnonymousAuthentication `json:"anonymous"`
 }
 
 type KubeletX509Authentication struct {
-	// clientCAFile is the path to a PEM-encoded certificate bundle. If set, any request presenting a client certificate
+	// clientCAFile is the path to a PEM-encoded certificate bundle. If set, any request
-	// signed by one of the authorities in the bundle is authenticated with a username corresponding to the CommonName,
+	// presenting a client certificate signed by one of the authorities in the bundle
+	// is authenticated with a username corresponding to the CommonName,
 	// and groups corresponding to the Organization in the client certificate.
 	// +optional
 	ClientCAFile string `json:"clientCAFile,omitempty"`
 }
 
 type KubeletWebhookAuthentication struct {
-	// enabled allows bearer token authentication backed by the tokenreviews.authentication.k8s.io API
+	// enabled allows bearer token authentication backed by the
+	// tokenreviews.authentication.k8s.io API.
 	// +optional
 	Enabled *bool `json:"enabled,omitempty"`
 	// cacheTTL enables caching of authentication results
@@ -964,8 +1005,10 @@ type KubeletWebhookAuthentication struct {
 
 type KubeletAnonymousAuthentication struct {
 	// enabled allows anonymous requests to the kubelet server.
-	// Requests that are not rejected by another authentication method are treated as anonymous requests.
+	// Requests that are not rejected by another authentication method are treated as
-	// Anonymous requests have a username of system:anonymous, and a group name of system:unauthenticated.
+	// anonymous requests.
+	// Anonymous requests have a username of `system:anonymous`, and a group name of
+	// `system:unauthenticated`.
 	// +optional
 	Enabled *bool `json:"enabled,omitempty"`
 }
@@ -977,7 +1020,7 @@ type KubeletAnonymousAuthentication struct {
 // It exists in the kubeletconfig API group because it is classified as a versioned input to the Kubelet.
 type SerializedNodeConfigSource struct {
 	metav1.TypeMeta `json:",inline"`
-	// Source is the source that we are serializing
+	// source is the source that we are serializing.
 	// +optional
 	Source v1.NodeConfigSource `json:"source,omitempty" protobuf:"bytes,1,opt,name=source"`
 }