mirror of
https://github.com/k3s-io/kubernetes.git
synced 2025-12-03 21:04:47 +00:00
9a9d897d94
Add the option to configure e2e access to member clusters from the same secrets in the host cluster used by the federation control plane. The default behavior will continue to be sourcing this configuration from the e2e kubeconfig. The optional behavior can be enabled by passing --federation-config-from-cluster=true as an argument to ginkgo.
727 lines
14 KiB
Plaintext
727 lines
14 KiB
Plaintext
accept-hosts
|
|
accept-paths
|
|
admission-control
|
|
admission-control-config-file
|
|
advertise-address
|
|
advertised-address
|
|
algorithm-provider
|
|
all-namespaces
|
|
allocate-node-cidrs
|
|
allowed-not-ready-nodes
|
|
allow-missing-template-keys
|
|
allow-privileged
|
|
anonymous-auth
|
|
api-burst
|
|
api-external-dns-names
|
|
api-prefix
|
|
api-rate
|
|
api-server-advertise-address
|
|
apiserver-advertise-address
|
|
apiserver-arg-overrides
|
|
apiserver-arg-overrides
|
|
apiserver-bind-port
|
|
apiserver-cert-extra-sans
|
|
apiserver-count
|
|
apiserver-count
|
|
apiserver-count
|
|
apiserver-count
|
|
api-server-port
|
|
api-server-port
|
|
api-servers
|
|
api-servers
|
|
apiserver-count
|
|
apiserver-count
|
|
api-server-port
|
|
api-servers
|
|
api-server-service-type
|
|
api-token
|
|
api-version
|
|
apiserver-arg-overrides
|
|
apiserver-count
|
|
apiserver-count
|
|
apiserver-enable-basic-auth
|
|
apiserver-enable-token-auth
|
|
attach-detach-reconcile-sync-period
|
|
audit-log-maxage
|
|
audit-log-maxbackup
|
|
audit-log-maxsize
|
|
audit-log-path
|
|
authentication-kubeconfig
|
|
authentication-token-webhook
|
|
authentication-token-webhook-cache-ttl
|
|
authentication-token-webhook-config-file
|
|
authorization-kubeconfig
|
|
authorization-mode
|
|
authorization-policy-file
|
|
authorization-rbac-super-user
|
|
authorization-webhook-cache-authorized-ttl
|
|
authorization-webhook-cache-unauthorized-ttl
|
|
authorization-webhook-config-file
|
|
auth-provider
|
|
auth-provider
|
|
auth-provider-arg
|
|
auth-provider-arg
|
|
azure-container-registry-config
|
|
babysit-daemons
|
|
basic-auth-file
|
|
bench-pods
|
|
bench-quiet
|
|
bench-tasks
|
|
bench-workers
|
|
bind-address
|
|
bind-pods-burst
|
|
bind-pods-qps
|
|
bounding-dirs
|
|
build-dependencies
|
|
build-only
|
|
build-tag
|
|
ca-cert-path
|
|
cadvisor-port
|
|
cert-altnames
|
|
cert-dir
|
|
certificate-authority
|
|
cgroup-driver
|
|
cgroup-root
|
|
cgroups-per-qos
|
|
chaos-chance
|
|
cidr-allocator-type
|
|
clean-start
|
|
cleanup
|
|
cleanup-iptables
|
|
client-ca-file
|
|
client-certificate
|
|
client-key
|
|
client-name
|
|
clientset-api-path
|
|
clientset-name
|
|
clientset-only
|
|
clientset-path
|
|
cloud-config
|
|
cloud-provider
|
|
cloud-provider-gce-lb-src-cidrs
|
|
cluster-cidr
|
|
cluster-context
|
|
cluster-dns
|
|
cluster-domain
|
|
cluster-ip
|
|
cluster-monitor-period
|
|
cluster-name
|
|
cluster-signing-cert-file
|
|
cluster-signing-gke-kubeconfig
|
|
cluster-signing-gke-retry-backoff
|
|
cluster-signing-key-file
|
|
cluster-tag
|
|
cni-bin-dir
|
|
cni-conf-dir
|
|
concurrent-deployment-syncs
|
|
concurrent-endpoint-syncs
|
|
concurrent-gc-syncs
|
|
concurrent-namespace-syncs
|
|
concurrent-replicaset-syncs
|
|
concurrent-resource-quota-syncs
|
|
concurrent-serviceaccount-token-syncs
|
|
concurrent-service-syncs
|
|
config-map
|
|
config-map-namespace
|
|
config-sync-period
|
|
configure-cloud-routes
|
|
conntrack-max
|
|
conntrack-max-per-core
|
|
conntrack-min
|
|
conntrack-tcp-timeout-close-wait
|
|
conntrack-tcp-timeout-established
|
|
consumer-port
|
|
consumer-service-name
|
|
consumer-service-namespace
|
|
container-port
|
|
container-runtime
|
|
container-runtime-endpoint
|
|
contain-pod-resources
|
|
contention-profiling
|
|
controllermanager-arg-overrides
|
|
controller-start-interval
|
|
core-kubeconfig
|
|
cors-allowed-origins
|
|
cpu-cfs-quota
|
|
cpu-percent
|
|
create-annotation
|
|
current-release-pr
|
|
current-replicas
|
|
daemonset-lookup-cache-size
|
|
data-dir
|
|
default-container-cpu-limit
|
|
default-container-mem-limit
|
|
delay-shutdown
|
|
delete-collection-workers
|
|
delete-instances
|
|
delete-local-data
|
|
delete-namespace
|
|
delete-namespace-on-failure
|
|
deleting-pods-burst
|
|
deleting-pods-qps
|
|
deployment-controller-sync-period
|
|
deployment-label-key
|
|
deserialization-cache-size
|
|
dest-file
|
|
disable-attach-detach-reconcile-sync
|
|
disable-filter
|
|
disable-kubenet
|
|
disable-log-dump
|
|
discovery-file
|
|
discovery-port
|
|
discovery-token
|
|
dns-bind-address
|
|
dns-domain
|
|
dns-port
|
|
dns-provider
|
|
dns-provider-config
|
|
dns-zone-name
|
|
dockercfg-path
|
|
docker-email
|
|
docker-endpoint
|
|
docker-exec-handler
|
|
docker-password
|
|
docker-server
|
|
docker-username
|
|
driver-port
|
|
drop-embedded-fields
|
|
dry-run
|
|
dump-logs-on-failure
|
|
duration-sec
|
|
e2e-output-dir
|
|
e2e-verify-service-account
|
|
enable-controller-attach-detach
|
|
enable-cri
|
|
enable-custom-metrics
|
|
enable-debugging-handlers
|
|
enable-dynamic-provisioning
|
|
enable-garbage-collector
|
|
enable-garbage-collector
|
|
enable-garbage-collector
|
|
enable-hostpath-provisioner
|
|
enable-server
|
|
enable-swagger-ui
|
|
enable-taint-manager
|
|
enforce-node-allocatable
|
|
etcd-address
|
|
etcd-cafile
|
|
etcd-certfile
|
|
etcd-config
|
|
etcd-keyfile
|
|
etcd-metrics-scrape-uri
|
|
etcd-metrics-scrape-uri
|
|
etcd-mutation-timeout
|
|
etcd-persistent-storage
|
|
etcd-prefix
|
|
etcd-pv-capacity
|
|
etcd-quorum-read
|
|
etcd-server
|
|
etcd-servers
|
|
etcd-servers-overrides
|
|
etcd-upgrade-storage
|
|
etcd-upgrade-version
|
|
etcd-version-scrape-uri
|
|
etcd-version-scrape-uri
|
|
event-burst
|
|
event-qps
|
|
event-ttl
|
|
eviction-hard
|
|
eviction-max-pod-grace-period
|
|
eviction-minimum-reclaim
|
|
eviction-pressure-transition-period
|
|
eviction-soft
|
|
eviction-soft-grace-period
|
|
executor-bindall
|
|
executor-logv
|
|
executor-path
|
|
executor-suicide-timeout
|
|
exit-on-lock-contention
|
|
experimental-allocatable-ignore-eviction
|
|
experimental-allowed-unsafe-sysctls
|
|
experimental-bootstrap-kubeconfig
|
|
experimental-bootstrap-token-auth
|
|
experimental-check-node-capabilities-before-mount
|
|
experimental-cri
|
|
experimental-dockershim
|
|
experimental-dockershim-root-directory
|
|
experimental-fail-swap-on
|
|
experimental-kernel-memcg-notification
|
|
experimental-keystone-ca-file
|
|
experimental-keystone-url
|
|
experimental-keystone-url
|
|
experimental-mounter-path
|
|
experimental-nvidia-gpus
|
|
experimental-prefix
|
|
experimental-qos-reserved
|
|
external-etcd-cafile
|
|
external-etcd-certfile
|
|
external-etcd-endpoints
|
|
external-etcd-keyfile
|
|
external-hostname
|
|
external-ip
|
|
external-name
|
|
extra-peer-dirs
|
|
failover-timeout
|
|
failure-domains
|
|
fake-clientset
|
|
feature-gates
|
|
federated-api-burst
|
|
federated-api-qps
|
|
federated-kube-context
|
|
federation-config-from-cluster
|
|
federation-name
|
|
federation-system-namespace
|
|
federation-upgrade-target
|
|
file-check-frequency
|
|
file_content_in_loop
|
|
file-suffix
|
|
flex-volume-plugin-dir
|
|
forward-services
|
|
framework-name
|
|
framework-store-uri
|
|
framework-weburi
|
|
from-env-file
|
|
from-file
|
|
from-literal
|
|
func-dest
|
|
fuzz-iters
|
|
garbage-collector-enabled
|
|
garbage-collector-enabled
|
|
gather-logs-sizes
|
|
gather-metrics-at-teardown
|
|
gather-resource-usage
|
|
gce-multizone
|
|
gce-project
|
|
gce-service-account
|
|
gce-upgrade-script
|
|
gce-zone
|
|
ginkgo-flags
|
|
gke-cluster
|
|
go-header-file
|
|
google-json-key
|
|
grace-period
|
|
ha-domain
|
|
hairpin-mode
|
|
hard
|
|
hard-pod-affinity-symmetric-weight
|
|
healthz-bind-address
|
|
healthz-port
|
|
heapster-namespace
|
|
heapster-port
|
|
heapster-scheme
|
|
heapster-service
|
|
horizontal-pod-autoscaler-sync-period
|
|
host-cluster-context
|
|
host-ipc-sources
|
|
hostname-override
|
|
host-network-sources
|
|
host-pid-sources
|
|
host-port-endpoints
|
|
host-system-namespace
|
|
http-check-frequency
|
|
http-port
|
|
ignore-daemonsets
|
|
ignore-not-found
|
|
image-config-file
|
|
image-gc-high-threshold
|
|
image-gc-low-threshold
|
|
image-project
|
|
image-pull-policy
|
|
image-pull-progress-deadline
|
|
image-service-endpoint
|
|
included-types-overrides
|
|
include-extended-apis
|
|
include-extended-apis
|
|
initial-sync-timeout
|
|
input-base
|
|
input-dirs
|
|
insecure-allow-any-token
|
|
insecure-bind-address
|
|
insecure-experimental-approve-all-kubelet-csrs-for-group
|
|
insecure-port
|
|
insecure-skip-tls-verify
|
|
instance-metadata
|
|
instance-name-prefix
|
|
internal-clientset-package
|
|
iptables-drop-bit
|
|
iptables-masquerade-bit
|
|
iptables-min-sync-period
|
|
iptables-sync-period
|
|
ir-data-source
|
|
ir-dbname
|
|
ir-hawkular
|
|
ir-influxdb-host
|
|
ir-namespace-only
|
|
ir-password
|
|
ir-user
|
|
jenkins-host
|
|
jenkins-jobs
|
|
junit-file-number
|
|
k8s-bin-dir
|
|
k8s-build-output
|
|
keep-gogoproto
|
|
keep-terminated-pod-volumes
|
|
km-path
|
|
kops-admin-access
|
|
kops-cluster
|
|
kops-kubernetes-version
|
|
kops-nodes
|
|
kops-ssh-key
|
|
kops-state
|
|
kops-up-timeout
|
|
kops-zones
|
|
kubeadm-cmd-skip
|
|
kubeadm-cmd-skip
|
|
kubeadm-path
|
|
kubeadm-path
|
|
kube-api-burst
|
|
kube-api-content-type
|
|
kube-api-qps
|
|
kubecfg-file
|
|
kubectl-path
|
|
kubelet-address
|
|
kubelet-api-servers
|
|
kubelet-cadvisor-port
|
|
kubelet-certificate-authority
|
|
kubelet-cgroups
|
|
kubelet-client-certificate
|
|
kubelet-client-key
|
|
kubelet-docker-endpoint
|
|
kubelet-enable-debugging-handlers
|
|
kubelet-flags
|
|
kubelet-host-network-sources
|
|
kubelet-https
|
|
kubelet-kubeconfig
|
|
kubelet-network-plugin
|
|
kubelet-pod-infra-container-image
|
|
kubelet-port
|
|
kubelet-preferred-address-types
|
|
kubelet-read-only-port
|
|
kubelet-root-dir
|
|
kubelet-sync-frequency
|
|
kubelet-timeout
|
|
kube-master
|
|
kube-master
|
|
kube-master
|
|
kube-master
|
|
kube-master-url
|
|
kube-master-url
|
|
kube-reserved
|
|
kube-reserved
|
|
kube-reserved-cgroup
|
|
kube-master-url
|
|
kube-reserved
|
|
kubernetes-anywhere-cluster
|
|
kubernetes-anywhere-path
|
|
kubernetes-anywhere-phase2-provider
|
|
kubernetes-anywhere-up-timeout
|
|
kubernetes-service-node-port
|
|
kubernetes-version
|
|
label-columns
|
|
large-cluster-size-threshold
|
|
last-release-pr
|
|
leader-elect
|
|
leader-elect-lease-duration
|
|
leader-elect-renew-deadline
|
|
leader-elect-retry-period
|
|
lease-duration
|
|
leave-stdin-open
|
|
limit-bytes
|
|
listen-address
|
|
listers-package
|
|
load-balancer-ip
|
|
lock-file
|
|
log-flush-frequency
|
|
log-lines-total
|
|
long-running-request-regexp
|
|
low-diskspace-threshold-mb
|
|
make-iptables-util-chains
|
|
make-symlinks
|
|
manifest-url
|
|
manifest-url-header
|
|
masquerade-all
|
|
master-os-distro
|
|
master-service-namespace
|
|
max-concurrency
|
|
max-connection-bytes-per-sec
|
|
maximum-dead-containers
|
|
maximum-dead-containers-per-container
|
|
max-log-age
|
|
max-log-backups
|
|
max-log-size
|
|
max-mutating-requests-inflight
|
|
max-open-files
|
|
max-outgoing-burst
|
|
max-outgoing-qps
|
|
max-pods
|
|
max-requests-inflight
|
|
mesos-authentication-principal
|
|
mesos-authentication-provider
|
|
mesos-authentication-secret-file
|
|
mesos-cgroup-prefix
|
|
mesos-default-pod-roles
|
|
mesos-executor-cpus
|
|
mesos-executor-mem
|
|
mesos-framework-roles
|
|
mesos-generate-task-discovery
|
|
mesos-launch-grace-period
|
|
mesos-master
|
|
mesos-sandbox-overlay
|
|
mesos-user
|
|
metrics-path
|
|
min-available
|
|
minimum-container-ttl-duration
|
|
minimum-image-ttl-duration
|
|
minion-max-log-age
|
|
minion-max-log-backups
|
|
minion-max-log-size
|
|
minion-path-override
|
|
min-pr-number
|
|
min-request-timeout
|
|
min-resync-period
|
|
namespace-sync-period
|
|
network-plugin
|
|
network-plugin-dir
|
|
network-plugin-mtu
|
|
node-cidr-mask-size
|
|
node-eviction-rate
|
|
node-instance-group
|
|
node-ip
|
|
node-labels
|
|
node-max-log-age
|
|
node-max-log-backups
|
|
node-max-log-size
|
|
node-monitor-grace-period
|
|
node-monitor-period
|
|
node-name
|
|
node-os-distro
|
|
node-path-override
|
|
node-port
|
|
node-schedulable-timeout
|
|
node-startup-grace-period
|
|
node-status-update-frequency
|
|
node-sync-period
|
|
no-headers
|
|
no-headers
|
|
non-masquerade-cidr
|
|
no-suggestions
|
|
no-suggestions
|
|
num-nodes
|
|
oidc-ca-file
|
|
oidc-client-id
|
|
oidc-groups-claim
|
|
oidc-issuer-url
|
|
oidc-username-claim
|
|
only-idl
|
|
oom-score-adj
|
|
outofdisk-transition-frequency
|
|
output-base
|
|
output-directory
|
|
output-file-base
|
|
output-package
|
|
output-print-type
|
|
output-version
|
|
out-version
|
|
path-override
|
|
pod-cidr
|
|
pod-eviction-timeout
|
|
pod-infra-container-image
|
|
pod-manifest-path
|
|
pod-network-cidr
|
|
pod-running
|
|
pod-running-timeout
|
|
pods-per-core
|
|
policy-config-file
|
|
policy-configmap
|
|
policy-configmap-namespace
|
|
poll-interval
|
|
portal-net
|
|
prepull-images
|
|
private-mountns
|
|
prom-push-gateway
|
|
protect-kernel-defaults
|
|
proto-import
|
|
proxy-bindall
|
|
proxy-client-cert-file
|
|
proxy-client-key-file
|
|
proxy-kubeconfig
|
|
proxy-logv
|
|
proxy-mode
|
|
proxy-port-range
|
|
public-address-override
|
|
pvclaimbinder-sync-period
|
|
pvclaimbinder-sync-period
|
|
pv-recycler-increment-timeout-nfs
|
|
pv-recycler-maximum-retry
|
|
pv-recycler-minimum-timeout-hostpath
|
|
pv-recycler-minimum-timeout-nfs
|
|
pv-recycler-pod-template-filepath-hostpath
|
|
pv-recycler-pod-template-filepath-nfs
|
|
pv-recycler-timeout-increment-hostpath
|
|
quiet
|
|
read-only-port
|
|
really-crash-for-testing
|
|
reconcile-cidr
|
|
reconcile-cooldown
|
|
reconcile-interval
|
|
register-node
|
|
register-retry-count
|
|
register-schedulable
|
|
register-with-taints
|
|
registry-burst
|
|
registry-qps
|
|
reject-methods
|
|
reject-paths
|
|
remove-node
|
|
repair-malformed-updates
|
|
replicaset-lookup-cache-size
|
|
replication-controller-lookup-cache-size
|
|
repo-root
|
|
report-dir
|
|
report-prefix
|
|
requestheader-allowed-names
|
|
requestheader-client-ca-file
|
|
requestheader-extra-headers-prefix
|
|
requestheader-group-headers
|
|
requestheader-username-headers
|
|
required-contexts
|
|
require-kubeconfig
|
|
resolv-conf
|
|
resource
|
|
resource-container
|
|
resource-name
|
|
resource-quota-sync-period
|
|
resource-version
|
|
results-dir
|
|
retry_time
|
|
rkt-api-endpoint
|
|
rkt-path
|
|
rkt-stage1-image
|
|
root-ca-file
|
|
root-dir
|
|
route-reconciliation-period
|
|
run-duration
|
|
run-kubelet-mode
|
|
run-proxy
|
|
run-services-mode
|
|
runtime-cgroups
|
|
runtime-config
|
|
runtime-request-timeout
|
|
save-config
|
|
schedule-pods-here
|
|
scheduler-config
|
|
scheduler-name
|
|
schema-cache-dir
|
|
scopes
|
|
scrape-timeout
|
|
seccomp-profile-root
|
|
secondary-node-eviction-rate
|
|
secret-name
|
|
secure-port
|
|
self-hosted
|
|
serialize-image-pulls
|
|
server-start-timeout
|
|
service-account-key-file
|
|
service-account-lookup
|
|
service-account-private-key-file
|
|
service-address
|
|
service-cidr
|
|
service-cluster-ip-range
|
|
service-dns-domain
|
|
service-dns-suffix
|
|
service-generator
|
|
service-node-port-range
|
|
service-node-ports
|
|
service-overrides
|
|
service-sync-period
|
|
session-affinity
|
|
show-all
|
|
show-events
|
|
show-kind
|
|
show-labels
|
|
shutdown-fd
|
|
shutdown-fifo
|
|
since-seconds
|
|
since-time
|
|
skip-generated-rewrite
|
|
skip-munges
|
|
skip-preflight-checks
|
|
skip-unsafe
|
|
sort-by
|
|
source-file
|
|
ssh-env
|
|
ssh-key
|
|
ssh-keyfile
|
|
ssh-options
|
|
ssh-user
|
|
start-services
|
|
static-pods-config
|
|
stats-port
|
|
stop-services
|
|
storage-media-type
|
|
storage-version
|
|
storage-versions
|
|
streaming-connection-idle-timeout
|
|
suicide-timeout
|
|
sync-frequency
|
|
system-cgroups
|
|
system-pods-startup-timeout
|
|
system-reserved
|
|
system-reserved-cgroup
|
|
system-validate-mode
|
|
target-port
|
|
target-ram-mb
|
|
tcp-services
|
|
terminated-pod-gc-threshold
|
|
test-flags
|
|
test-timeout
|
|
tls-bootstrap-token
|
|
tls-ca-file
|
|
tls-cert-file
|
|
tls-private-key-file
|
|
tls-sni-cert-key
|
|
token-auth-file
|
|
token-ttl
|
|
to-version
|
|
to-version
|
|
ttl-keys-prefix
|
|
ttl-secs
|
|
type-src
|
|
udp-port
|
|
udp-timeout
|
|
unhealthy-zone-threshold
|
|
unix-socket
|
|
update-period
|
|
upgrade-image
|
|
upgrade-target
|
|
use-kubernetes-cluster-service
|
|
use-kubernetes-version
|
|
use-legacy-policy-config
|
|
use-service-account-credentials
|
|
user-whitelist
|
|
use-service-account-credentials
|
|
use-service-account-credentials
|
|
user-whitelist
|
|
use-service-account-credentials
|
|
use-taint-based-evictions
|
|
verb
|
|
verify-only
|
|
versioned-clientset-package
|
|
viper-config
|
|
viper-config
|
|
volume-dir
|
|
volume-plugin-dir
|
|
volume-stats-agg-period
|
|
watch-cache
|
|
watch-cache-sizes
|
|
watch-only
|
|
whitelist-override-label
|
|
windows-line-endings
|
|
www-prefix
|
|
zone-id
|
|
zone-name
|
|
lock-object-name
|
|
lock-object-namespace
|
|
|
|
horizontal-pod-autoscaler-use-rest-clients
|