Documentation
Blog de Kubernetes
Partenaires
Communauté
Études de cas
Versions
Release Information
v1.33
v1.32
v1.31
v1.30
v1.29
Français (French)
English
中文 (Chinese)
한국어 (Korean)
Documentation
Versions supportées de la documentation Kubernetes
Installation
Environnement d'apprentissage
Installer Kubernetes avec Minikube
Télécharger Kubernetes
Construire une release
Environnement de production
Container Runtimes
Installer Kubernetes avec les outils de déploiement
Déploiement d'un cluster avec kubeadm
Installer kubeadm
Création d'un Cluster à master unique avec kubeadm
Personnalisation de la configuration du control plane avec kubeadm
Options pour la topologie en haute disponibilité
Création de clusters hautement disponibles avec kubeadm
Configurer un cluster etcd en haute disponibilité avec kubeadm
Configuration des kubelet de votre cluster avec kubeadm
Dépanner kubeadm
Dual-stack support with kubeadm
Solutions Cloud clés en main
Turnkey Cloud Solutions
Windows dans Kubernetes
Best practices
Considerations for large clusters
Running in multiple zones
Validate node setup
Enforcing Pod Security Standards
PKI certificates and requirements
Solutions Cloud personnalisées
CoreOS sur AWS ou GCE
Installer Kubernetes avec Kubespray (on-premises et fournisseurs de cloud)
Installer Kubernetes sur AWS avec kops
Concepts
Vue d'ensemble
Qu'est-ce-que Kubernetes ?
Composants de Kubernetes
The Kubernetes API
Utilisation des objets Kubernetes
Kubernetes Object Management
Namespaces
Object Names and IDs
Labels and Selectors
Annotations
Field Selectors
Finalizers
Owners and Dependents
Recommended Labels
Architecture de Kubernetes
Noeuds
Communication between Nodes and the Control Plane
(EN)
Communication Master-Node
Concepts sous-jacents au Cloud Controller Manager
Controllers
(EN)
Leases
(EN)
About cgroup v2
(EN)
Container Runtime Interface (CRI)
(EN)
Garbage Collection
(EN)
Mixed Version Proxy
(EN)
Les conteneurs
Images
Classe d'exécution (Runtime Class)
L'environnement du conteneur
Hooks de cycle de vie de conteneurs
Workloads
Pods
Aperçu du Pod
Pods
Cycle de vie d'un Pod
Contraintes de propagation de topologie pour les Pods
Init Containers
Sidecar Containers
Ephemeral Containers
Disruptions
Pod Quality of Service Classes
User Namespaces
Downward API
Contrôleurs
ReplicaSet
Déploiements
StatefulSets
DaemonSet
Jobs
Automatic Cleanup for Finished Jobs
CronJob
ReplicationController
Autoscaling Workloads
Managing Workloads
Services, Equilibreur de charge, et Réseau
EndpointSlices
Service
DNS pour les services et les pods
Ingress
Ingress Controllers
Gateway API
Network Policies
IPv4/IPv6 dual-stack
Topology Aware Routing
Networking on Windows
Service ClusterIP allocation
Service Internal Traffic Policy
Stockage
Volumes
Volumes persistants
Projected Volumes
Ephemeral Volumes
Storage Classes
Volume Attributes Classes
Dynamic Volume Provisioning
Volume Snapshots
Volume Snapshot Classes
CSI Volume Cloning
Storage Capacity
Node-specific Volume Limits
Volume Health Monitoring
Windows Storage
Configuration
Configuration Best Practices
ConfigMaps
Resource Management for Pods and Containers
Secrets
Organizing Cluster Access Using kubeconfig Files
Resource Management for Windows nodes
Sécurité
Cloud Native Security
Pod Security Standards
Pod Security Admission
Service Accounts
Pod Security Policies
Security For Windows Nodes
Controlling Access to the Kubernetes API
Role Based Access Control Good Practices
Good practices for Kubernetes Secrets
Multi-tenancy
Hardening Guide - Authentication Mechanisms
Kubernetes API Server Bypass Risks
Security Checklist
Politiques
Limit Ranges
Resource Quotas
Process ID Limits And Reservations
Node Resource Managers
Scheduling, Preemption and Eviction
(EN)
Administration d'un cluster
Vue d'ensemble de l'administration d'un cluster
Certificats
Cluster Networking
Architecture de Journalisation d'évènements (logging)
Metrics For Kubernetes System Components
Metrics for Kubernetes Object States
System Logs
Traces For Kubernetes System Components
Proxies in Kubernetes
API Priority and Fairness
Cluster Autoscaling
Installing Addons
Extensions Kubernetes
Extensions de l'API Kubernetes
Custom Resources
Kubernetes API Aggregation Layer
Extensions compute, stockage et réseau
Network Plugins
Device Plugins
Operator pattern
Windows in Kubernetes
(EN)
Tâches
Outils d'installation
Install and Set Up kubectl on Linux
Install and Set Up kubectl on macOS
Install and Set Up kubectl on Windows
Installer et configurer kubectl
Installer Minikube
Administration d'un cluster
Administration avec kubeadm
Certificate Management with kubeadm
Configuring a cgroup driver
Reconfiguring a kubeadm cluster
Upgrading kubeadm clusters
Upgrading Linux nodes
Upgrading Windows nodes
Changing The Kubernetes Package Repository
Gestion de la mémoire du CPU et des ressources d'API
Configure Default Memory Requests and Limits for a Namespace
Configure Default CPU Requests and Limits for a Namespace
Configure Minimum and Maximum Memory Constraints for a Namespace
Configure Minimum and Maximum CPU Constraints for a Namespace
Configure Memory and CPU Quotas for a Namespace
Configure a Pod Quota for a Namespace
Migrating from dockershim
Changing the Container Runtime on a Node from Docker Engine to containerd
Migrate Docker Engine nodes from dockershim to cri-dockerd
Find Out What Container Runtime is Used on a Node
Troubleshooting CNI plugin-related errors
Check whether dockershim removal affects you
Migrating telemetry and security agents from dockershim
Generate Certificates Manually
Installation d'un fournisseur de politiques de réseau
Use Antrea for NetworkPolicy
Use Calico for NetworkPolicy
Use Cilium for NetworkPolicy
Use Kube-router for NetworkPolicy
Romana for NetworkPolicy
Weave Net for NetworkPolicy
Access Clusters Using the Kubernetes API
Advertise Extended Resources for a Node
Autoscale the DNS Service in a Cluster
Change the Access Mode of a PersistentVolume to ReadWriteOncePod
Change the default StorageClass
Switching from Polling to CRI Event-based Updates to Container Status
Change the Reclaim Policy of a PersistentVolume
Configure a kubelet image credential provider
Configure Quotas for API Objects
Control CPU Management Policies on the Node
Control Topology Management Policies on a node
Customizing DNS Service
Debugging DNS Resolution
Déclarer une politique réseau (NetworkPolicy)
Enable Or Disable A Kubernetes API
Encrypting Confidential Data at Rest
Decrypt Confidential Data that is Already Encrypted at Rest
Guaranteed Scheduling For Critical Add-On Pods
IP Masquerade Agent User Guide
Limit Storage Consumption
Migrate Replicated Control Plane To Use Cloud Controller Manager
Namespaces Walkthrough
Operating etcd clusters for Kubernetes
Reserve Compute Resources for System Daemons
Running Kubernetes Node Components as a Non-root User
Safely Drain a Node
Securing a Cluster
Set Kubelet Parameters Via A Configuration File
Share a Cluster with Namespaces
Upgrade A Cluster
Use Cascading Deletion in a Cluster
Using a KMS provider for data encryption
Using CoreDNS for Service Discovery
Using NodeLocal DNSCache in Kubernetes Clusters
Using sysctls in a Kubernetes Cluster
Utilizing the NUMA-aware Memory Manager
Verify Signed Kubernetes Artifacts
Développer un Cloud Controller Manager
Kubernetes cloud-controller-manager
Configuration des Pods et des conteneurs
Allouer des ressources mémoire aux conteneurs et aux pods
Allouer des ressources CPU aux conteneurs et aux pods
Configure GMSA for Windows Pods and containers
Configurer la qualité de service pour les pods
Resize CPU and Memory Resources assigned to Containers
Affecter des ressources supplémentaires à un conteneur
Configure RunAsUserName for Windows pods and containers
Configurer un pod en utilisant un volume pour le stockage
Create a Windows HostProcess Pod
Configurer un Pod pour utiliser un stockage de type PersistentVolume
Configurer les comptes de service pour les pods
Configure a Pod to Use a Projected Volume for Storage
Récupération d'une image d'un registre privé
Configure a Security Context for a Pod or Container
Configurer les Liveness, Readiness et Startup Probes
Assigner des pods aux nœuds
Configurer l'initialisation du pod
Configurer un pod pour utiliser une ConfigMap
Assign Pods to Nodes using Node Affinity
Partager l'espace de nommage des processus entre les conteneurs d'un Pod
Attach Handlers to Container Lifecycle Events
Convertir un fichier Docker Compose en ressources Kubernetes
Use a User Namespace With a Pod
Create static Pods
Enforce Pod Security Standards by Configuring the Built-in Admission Controller
Enforce Pod Security Standards with Namespace Labels
Migrate from PodSecurityPolicy to the Built-In PodSecurity Admission Controller
Gérez vos objets Kubernetes
Declarative Management of Kubernetes Objects Using Configuration Files
Declarative Management of Kubernetes Objects Using Kustomize
Managing Kubernetes Objects Using Imperative Commands
Imperative Management of Kubernetes Objects Using Configuration Files
Update API Objects in Place Using kubectl patch
Injecter des données dans les applications
Définir une commande et ses arguments pour un Container
Définir des variables d'environnement dépendantes
Définir des variables d'environnement pour un Container
Exposer les informations du Pod aux containers via les variables d'environnement
Exposer les informations d'un Pod à ses containers à travers des fichiers
Distribuer des données sensibles de manière sécurisée avec les Secrets
Exécution des applications
Exécuter une application stateless avec un Déploiement
Exécutez une application stateful mono-instance
Run a Replicated Stateful Application
Scale a StatefulSet
Delete a StatefulSet
Force Delete StatefulSet Pods
Horizontal Pod Autoscaling
Découverte de l'HorizontalPodAutoscaler
Specifying a Disruption Budget for your Application
Accéder à l'API de Kubernetes depuis un Pod
Monitoring, Logging, and Debugging
Troubleshooting Applications
Debug Pods
Debug Services
Debug a StatefulSet
Determine the Reason for Pod Failure
Debug Init Containers
Debug Running Pods
Get a Shell to a Running Container
Troubleshooting Clusters
Troubleshooting kubectl
Resource metrics pipeline
Tools for Monitoring Resources
Monitor Node Health
Debugging Kubernetes nodes with crictl
Auditing
Debugging Kubernetes Nodes With Kubectl
Developing and debugging services locally using telepresence
Windows debugging tips
Exécution des jobs
Running Automated Tasks with a CronJob
Coarse Parallel Processing Using a Work Queue
Fine Parallel Processing Using a Work Queue
Indexed Job for Parallel Processing with Static Work Assignment
Job with Pod-to-Pod Communication
Parallel Processing using Expansions
Handling retriable and non-retriable pod failures with Pod failure policy
Accès aux applications dans un cluster
Tableau de bord (Dashboard)
Accessing Clusters
Configurer l'accès à plusieurs clusters
Utiliser le Port Forwarding pour accéder à des applications dans un cluster
Utiliser un Service pour accéder à une application dans un cluster
Connecter un Frontend à un Backend en utilisant les Services
Create an External Load Balancer
Lister toutes les images de conteneur exécutées dans un cluster
Set up Ingress on Minikube with the NGINX Ingress Controller
Communicate Between Containers in the Same Pod Using a Shared Volume
Configure DNS for a Cluster
Access Services Running on Clusters
Gestion des Secrets
Gestion des secrets avec kubectl
Gestion des Secrets avec un fichier de configuration
Gestion des secrets avec Kustomize
Monitoring, Logging et Debugging
Obtenez un shell dans un conteneur en cours d'exécution
Extensions de Kubernetes
Utilisation des ressources personnalisées
TLS
Configure Certificate Rotation for the Kubelet
Manage TLS Certificates in a Cluster
Manual Rotation of CA Certificates
Extend Kubernetes
Configure the Aggregation Layer
Use Custom Resources
Extend the Kubernetes API with CustomResourceDefinitions
Versions in CustomResourceDefinitions
Set up an Extension API Server
Configure Multiple Schedulers
Use an HTTP Proxy to Access the Kubernetes API
Use a SOCKS5 Proxy to Access the Kubernetes API
Set up Konnectivity service
Fédération
Administration du Control Plane de la fédération
Gestion des démons du cluster
Perform a Rolling Update on a DaemonSet
Perform a Rollback on a DaemonSet
Running Pods on Only Some Nodes
Networking
Adding entries to Pod /etc/hosts with HostAliases
Extend Service IP Ranges
Validate IPv4/IPv6 dual-stack
Extend kubectl with plugins
Manage HugePages
Schedule GPUs
Tutoriels
Hello Minikube
Apprendre les bases de Kubernetes
Créer un cluster
Utiliser Minikube pour créer un cluster
Didacticiel interactif - Création d'un cluster
Déployer une application
Utiliser kubectl pour créer un déploiement
Tutoriel interactif - Déploiement d'une application
Explorez vos applications
Affichage des pods et des nœuds
Rendre publique votre application
Using a Service to Expose Your App
Mise à l'échelle des applications
Running Multiple Instances of Your App
Mise à jour des applications
Performing a Rolling Update
Formations en ligne
Configuration
Example: Configuring a Java Microservice
Externalizing config using MicroProfile, ConfigMaps and Secrets
Configuring Redis using a ConfigMap
Applications sans états
Exposing an External IP Address to Access an Application in a Cluster
Example: Deploying PHP Guestbook application with Redis
Security
Apply Pod Security Standards at the Cluster Level
Apply Pod Security Standards at the Namespace Level
Restrict a Container's Access to Resources with AppArmor
Restrict a Container's Syscalls with seccomp
Applications avec états
StatefulSet Basics
Example: Deploying WordPress and MySQL with Persistent Volumes
Example: Deploying Cassandra with a StatefulSet
Running ZooKeeper, A Distributed System Coordinator
Clusters
Services
Connecting Applications with Services
Using Source IP
Explore Termination Behavior for Pods And Their Endpoints
Référence
Glossary
Problèmes et alertes de sécurité de Kubernetes
Kubernetes Issue Tracker
Kubernetes Security and Disclosure Information
CVE feed
Utilisation de l'API Kubernetes
Kubernetes API Concepts
Server-Side Apply
Client Libraries
Common Expression Language in Kubernetes
Kubernetes Deprecation Policy
Deprecated API Migration Guide
Kubernetes API health endpoints
Accéder à l'API
Authenticating
Authenticating with Bootstrap Tokens
Certificates and Certificate Signing Requests
Admission Controllers
Dynamic Admission Control
Managing Service Accounts
Authorization Overview
Utilisation de l'autorisation RBAC
Using ABAC Authorization
Using Node Authorization
Mapping PodSecurityPolicies to Pod Security Standards
Webhook Mode
Kubelet authentication/authorization
TLS bootstrapping
Validating Admission Policy
Référence de l'API
Workload Resources
Pod
PodTemplate
ReplicationController
ReplicaSet
Deployment
StatefulSet
ControllerRevision
DaemonSet
Job
CronJob
HorizontalPodAutoscaler
HorizontalPodAutoscaler
PriorityClass
PodSchedulingContext v1alpha2
ResourceClaim v1alpha2
ResourceClaimTemplate v1alpha2
ResourceClass v1alpha2
Service Resources
Service
Endpoints
EndpointSlice
Ingress
IngressClass
Config and Storage Resources
ConfigMap
Secret
Volume
PersistentVolumeClaim
PersistentVolume
StorageClass
VolumeAttachment
CSIDriver
CSINode
CSIStorageCapacity
Authentication Resources
ServiceAccount
TokenRequest
TokenReview
CertificateSigningRequest
ClusterTrustBundle v1alpha1
SelfSubjectReview
Authorization Resources
LocalSubjectAccessReview
SelfSubjectAccessReview
SelfSubjectRulesReview
SubjectAccessReview
ClusterRole
ClusterRoleBinding
Role
RoleBinding
Policy Resources
LimitRange
ResourceQuota
NetworkPolicy
PodDisruptionBudget
IPAddress v1alpha1
Extend Resources
CustomResourceDefinition
MutatingWebhookConfiguration
ValidatingWebhookConfiguration
ValidatingAdmissionPolicy v1beta1
Cluster Resources
Node
Namespace
Event
APIService
Lease
RuntimeClass
FlowSchema v1beta3
PriorityLevelConfiguration v1beta3
Binding
ComponentStatus
ClusterCIDR v1alpha1
Common Definitions
DeleteOptions
LabelSelector
ListMeta
LocalObjectReference
NodeSelectorRequirement
ObjectFieldSelector
ObjectMeta
ObjectReference
Patch
Quantity
ResourceFieldSelector
Status
TypedLocalObjectReference
Other Resources
ValidatingAdmissionPolicyBindingList v1beta1
Common Parameters
Well-Known Labels, Annotations and Taints
Audit Annotations
Référence des outils d'installation
Kubeadm
Aperçu de kubeadm
kubeadm init
kubeadm join
kubeadm upgrade
kubeadm config
kubeadm reset
kubeadm token
kubeadm version
kubeadm alpha
kubeadm certs
kubeadm init phase
kubeadm join phase
kubeadm kubeconfig
kubeadm reset phase
kubeadm upgrade phase
Implementation details
kubefed
CLI kubectl
Introduction To Kubectl
kubectl Quick Reference
kubectl reference
kubectl
kubectl annotate
kubectl api-resources
kubectl api-versions
kubectl apply
kubectl apply edit-last-applied