# kube-controller-manager Configuration (v1alpha1)

kube-controller-manager Configuration (v1alpha1)Resource TypesCloudControllerManagerConfigurationLeaderMigrationConfigurationKubeControllerManagerConfigurationClientConnectionConfigurationAppears in:KubeSchedulerConfigurationGenericControllerManagerConfigurationClientConnectionConfiguration contains details for constructing a client.FieldDescriptionkubeconfig [Required]stringkubeconfig is the path to a KubeConfig file.acceptContentTypes [Required]stringacceptContentTypes defines the Accept header sent by clients when connecting to a server, overriding the default value of 'application/json'. This field will control all connections to the server used by a particular client.contentType [Required]stringcontentType is the content type used when sending data to the server from this client.qps [Required]float32qps controls the number of queries per second allowed for this connection.burst [Required]int32burst allows extra queries to accumulate when a client is exceeding its rate.DebuggingConfigurationAppears in:KubeSchedulerConfigurationGenericControllerManagerConfigurationDebuggingConfiguration holds configuration for Debugging related features.FieldDescriptionenableProfiling [Required]boolenableProfiling enables profiling via web interface host:port/debug/pprof/enableContentionProfiling [Required]boolenableContentionProfiling enables block profiling, if enableProfiling is true.LeaderElectionConfigurationAppears in:KubeSchedulerConfigurationGenericControllerManagerConfigurationLeaderElectionConfiguration defines the configuration of leader election clients for components that can run with leader election enabled.FieldDescriptionleaderElect [Required]boolleaderElect enables a leader election client to gain leadership before executing the main loop. Enable this when running replicated components for high availability.leaseDuration [Required]meta/v1.DurationleaseDuration is the duration that non-leader candidates will wait after observing a leadership renewal until attempting to acquire leadership of a led but unrenewed leader slot. This is effectively the maximum duration that a leader can be stopped before it is replaced by another candidate. This is only applicable if leader election is enabled.renewDeadline [Required]meta/v1.DurationrenewDeadline is the interval between attempts by the acting master to renew a leadership slot before it stops leading. This must be less than or equal to the lease duration. This is only applicable if leader election is enabled.retryPeriod [Required]meta/v1.DurationretryPeriod is the duration the clients should wait between attempting acquisition and renewal of a leadership. This is only applicable if leader election is enabled.resourceLock [Required]stringresourceLock indicates the resource object type that will be used to lock during leader election cycles.resourceName [Required]stringresourceName indicates the name of resource object that will be used to lock during leader election cycles.resourceNamespace [Required]stringresourceName indicates the namespace of resource object that will be used to lock during leader election cycles.NodeControllerConfigurationAppears in:CloudControllerManagerConfigurationNodeControllerConfiguration contains elements describing NodeController.FieldDescriptionConcurrentNodeSyncs [Required]int32ConcurrentNodeSyncs is the number of workers concurrently synchronizing nodesServiceControllerConfigurationAppears in:CloudControllerManagerConfigurationKubeControllerManagerConfigurationServiceControllerConfiguration contains elements describing ServiceController.FieldDescriptionConcurrentServiceSyncs [Required]int32concurrentServiceSyncs is the number of services that are allowed to sync concurrently. Larger number = more responsive service management, but more CPU (and network) load.CloudControllerManagerConfigurationCloudControllerManagerConfiguration contains elements describing cloud-controller manager.FieldDescriptionapiVersionstringcloudcontrollermanager.config.k8s.io/v1alpha1kindstringCloudControllerManagerConfigurationGeneric [Required]GenericControllerManagerConfigurationGeneric holds configuration for a generic controller-managerKubeCloudShared [Required]KubeCloudSharedConfigurationKubeCloudSharedConfiguration holds configuration for shared related features both in cloud controller manager and kube-controller manager.NodeController [Required]NodeControllerConfigurationNodeController holds configuration for node controller related features.ServiceController [Required]ServiceControllerConfigurationServiceControllerConfiguration holds configuration for ServiceController related features.NodeStatusUpdateFrequency [Required]meta/v1.DurationNodeStatusUpdateFrequency is the frequency at which the controller updates nodes' statusWebhook [Required]WebhookConfigurationWebhook is the configuration for cloud-controller-manager hosted webhooksCloudProviderConfigurationAppears in:KubeCloudSharedConfigurationCloudProviderConfiguration contains basically elements about cloud provider.FieldDescriptionName [Required]stringName is the provider for cloud services.CloudConfigFile [Required]stringcloudConfigFile is the path to the cloud provider configuration file.KubeCloudSharedConfigurationAppears in:CloudControllerManagerConfigurationKubeControllerManagerConfigurationKubeCloudSharedConfiguration contains elements shared by both kube-controller manager and cloud-controller manager, but not genericconfig.FieldDescriptionCloudProvider [Required]CloudProviderConfigurationCloudProviderConfiguration holds configuration for CloudProvider related features.ExternalCloudVolumePlugin [Required]stringexternalCloudVolumePlugin specifies the plugin to use when cloudProvider is "external". It is currently used by the in repo cloud providers to handle node and volume control in the KCM.UseServiceAccountCredentials [Required]booluseServiceAccountCredentials indicates whether controllers should be run with individual service account credentials.AllowUntaggedCloud [Required]boolrun with untagged cloud instancesRouteReconciliationPeriod [Required]meta/v1.DurationrouteReconciliationPeriod is the period for reconciling routes created for Nodes by cloud provider..NodeMonitorPeriod [Required]meta/v1.DurationnodeMonitorPeriod is the period for syncing NodeStatus in NodeController.ClusterName [Required]stringclusterName is the instance prefix for the cluster.ClusterCIDR [Required]stringclusterCIDR is CIDR Range for Pods in cluster.AllocateNodeCIDRs [Required]boolAllocateNodeCIDRs enables CIDRs for Pods to be allocated and, if ConfigureCloudRoutes is true, to be set on the cloud provider.CIDRAllocatorType [Required]stringCIDRAllocatorType determines what kind of pod CIDR allocator will be used.ConfigureCloudRoutes [Required]boolconfigureCloudRoutes enables CIDRs allocated with allocateNodeCIDRs to be configured on the cloud provider.NodeSyncPeriod [Required]meta/v1.DurationnodeSyncPeriod is the period for syncing nodes from cloudprovider. Longer periods will result in fewer calls to cloud provider, but may delay addition of new nodes to cluster.WebhookConfigurationAppears in:CloudControllerManagerConfigurationWebhookConfiguration contains configuration related to cloud-controller-manager hosted webhooksFieldDescriptionWebhooks [Required][]stringWebhooks is the list of webhooks to enable or disable '*' means "all enabled by default webhooks" 'foo' means "enable 'foo'" '-foo' means "disable 'foo'" first item for a particular name winsLeaderMigrationConfigurationAppears in:GenericControllerManagerConfigurationLeaderMigrationConfiguration provides versioned configuration for all migrating leader locks.FieldDescriptionapiVersionstringcontrollermanager.config.k8s.io/v1alpha1kindstringLeaderMigrationConfigurationleaderName [Required]stringLeaderName is the name of the leader election resource that protects the migration E.g. 1-20-KCM-to-1-21-CCMresourceLock [Required]stringResourceLock indicates the resource object type that will be used to lock Should be "leases" or "endpoints"controllerLeaders [Required][]ControllerLeaderConfigurationControllerLeaders contains a list of migrating leader lock configurationsControllerLeaderConfigurationAppears in:LeaderMigrationConfigurationControllerLeaderConfiguration provides the configuration for a migrating leader lock.FieldDescriptionname [Required]stringName is the name of the controller being migrated E.g. service-controller, route-controller, cloud-node-controller, etccomponent [Required]stringComponent is the name of the component in which the controller should be running. E.g. kube-controller-manager, cloud-controller-manager, etc Or '*' meaning the controller can be run under any component that participates in the migrationGenericControllerManagerConfigurationAppears in:CloudControllerManagerConfigurationKubeControllerManagerConfigurationGenericControllerManagerConfiguration holds configuration for a generic controller-manager.FieldDescriptionPort [Required]int32port is the port that the controller-manager's http service runs on.Address [Required]stringaddress is the IP address to serve on (set to 0.0.0.0 for all interfaces).MinResyncPeriod [Required]meta/v1.DurationminResyncPeriod is the resync period in reflectors; will be random between minResyncPeriod and 2*minResyncPeriod.ClientConnection [Required]ClientConnectionConfigurationClientConnection specifies the kubeconfig file and client connection settings for the proxy server to use when communicating with the apiserver.ControllerStartInterval [Required]meta/v1.DurationHow long to wait between starting controller managersLeaderElection [Required]LeaderElectionConfigurationleaderElection defines the configuration of leader election client.Controllers [Required][]stringControllers is the list of controllers to enable or disable '*' means "all enabled by default controllers" 'foo' means "enable 'foo'" '-foo' means "disable 'foo'" first item for a particular name winsDebugging [Required]DebuggingConfigurationDebuggingConfiguration holds configuration for Debugging related features.LeaderMigrationEnabled [Required]boolLeaderMigrationEnabled indicates whether Leader Migration should be enabled for the controller manager.LeaderMigration [Required]LeaderMigrationConfigurationLeaderMigration holds the configuration for Leader Migration.KubeControllerManagerConfigurationKubeControllerManagerConfiguration contains elements describing kube-controller manager.FieldDescriptionapiVersionstringkubecontrollermanager.config.k8s.io/v1alpha1kindstringKubeControllerManagerConfigurationGeneric [Required]GenericControllerManagerConfigurationGeneric holds configuration for a generic controller-managerKubeCloudShared [Required]KubeCloudSharedConfigurationKubeCloudSharedConfiguration holds configuration for shared related features both in cloud controller manager and kube-controller manager.AttachDetachController [Required]AttachDetachControllerConfigurationAttachDetachControllerConfiguration holds configuration for AttachDetachController related features.CSRSigningController [Required]CSRSigningControllerConfigurationCSRSigningControllerConfiguration holds configuration for CSRSigningController related features.DaemonSetController [Required]DaemonSetControllerConfigurationDaemonSetControllerConfiguration holds configuration for DaemonSetController related features.DeploymentController [Required]DeploymentControllerConfigurationDeploymentControllerConfiguration holds configuration for DeploymentController related features.StatefulSetController [Required]StatefulSetControllerConfigurationStatefulSetControllerConfiguration holds configuration for StatefulSetController related features.DeprecatedController [Required]DeprecatedControllerConfigurationDeprecatedControllerConfiguration holds configuration for some deprecated features.EndpointController [Required]EndpointControllerConfigurationEndpointControllerConfiguration holds configuration for EndpointController related features.EndpointSliceController [Required]EndpointSliceControllerConfigurationEndpointSliceControllerConfiguration holds configuration for EndpointSliceController related features.EndpointSliceMirroringController [Required]EndpointSliceMirroringControllerConfigurationEndpointSliceMirroringControllerConfiguration holds configuration for EndpointSliceMirroringController related features.EphemeralVolumeController [Required]EphemeralVolumeControllerConfigurationEphemeralVolumeControllerConfiguration holds configuration for EphemeralVolumeController related features.GarbageCollectorController [Required]GarbageCollectorControllerConfigurationGarbageCollectorControllerConfiguration holds configuration for GarbageCollectorController related features.HPAController [Required]HPAControllerConfigurationHPAControllerConfiguration holds configuration for HPAController related features.JobController [Required]JobControllerConfigurationJobControllerConfiguration holds configuration for JobController related features.CronJobController [Required]CronJobControllerConfigurationCronJobControllerConfiguration holds configuration for CronJobController related features.LegacySATokenCleaner [Required]LegacySATokenCleanerConfigurationLegacySATokenCleanerConfiguration holds configuration for LegacySATokenCleaner related features.NamespaceController [Required]NamespaceControllerConfigurationNamespaceControllerConfiguration holds configuration for NamespaceController related features.NodeIPAMController [Required]NodeIPAMControllerConfigurationNodeIPAMControllerConfiguration holds configuration for NodeIPAMController related features.NodeLifecycleController [Required]NodeLifecycleControllerConfigurationNodeLifecycleControllerConfiguration holds configuration for NodeLifecycleController related features.PersistentVolumeBinderController [Required]PersistentVolumeBinderControllerConfigurationPersistentVolumeBinderControllerConfiguration holds configuration for PersistentVolumeBinderController related features.PodGCController [Required]PodGCControllerConfigurationPodGCControllerConfiguration holds configuration for PodGCController related features.ReplicaSetController [Required]ReplicaSetControllerConfigurationReplicaSetControllerConfiguration holds configuration for ReplicaSet related features.ReplicationController [Required]ReplicationControllerConfigurationReplicationControllerConfiguration holds configuration for ReplicationController related features.ResourceQuotaController [Required]ResourceQuotaControllerConfigurationResourceQuotaControllerConfiguration holds configuration for ResourceQuotaController related features.SAController [Required]SAControllerConfigurationSAControllerConfiguration holds configuration for ServiceAccountController related features.ServiceController [Required]ServiceControllerConfigurationServiceControllerConfiguration holds configuration for ServiceController related features.TTLAfterFinishedController [Required]TTLAfterFinishedControllerConfigurationTTLAfterFinishedControllerConfiguration holds configuration for TTLAfterFinishedController related features.ValidatingAdmissionPolicyStatusController [Required]ValidatingAdmissionPolicyStatusControllerConfigurationValidatingAdmissionPolicyStatusControllerConfiguration holds configuration for ValidatingAdmissionPolicyStatusController related features.AttachDetachControllerConfigurationAppears in:KubeControllerManagerConfigurationAttachDetachControllerConfiguration contains elements describing AttachDetachController.FieldDescriptionDisableAttachDetachReconcilerSync [Required]boolReconciler runs a periodic loop to reconcile the desired state of the with the actual state of the world by triggering attach detach operations. This flag enables or disables reconcile. Is false by default, and thus enabled.ReconcilerSyncLoopPeriod [Required]meta/v1.DurationReconcilerSyncLoopPeriod is the amount of time the reconciler sync states loop wait between successive executions. Is set to 60 sec by default.disableForceDetachOnTimeout [Required]boolDisableForceDetachOnTimeout disables force detach when the maximum unmount time is exceeded. Is false by default, and thus force detach on unmount is enabled.CSRSigningConfigurationAppears in:CSRSigningControllerConfigurationCSRSigningConfiguration holds information about a particular CSR signerFieldDescriptionCertFile [Required]stringcertFile is the filename containing a PEM-encoded X509 CA certificate used to issue certificatesKeyFile [Required]stringkeyFile is the filename containing a PEM-encoded RSA or ECDSA private key used to issue certificatesCSRSigningControllerConfigurationAppears in:KubeControllerManagerConfigurationCSRSigningControllerConfiguration contains elements describing CSRSigningController.FieldDescriptionClusterSigningCertFile [Required]stringclusterSigningCertFile is the filename containing a PEM-encoded X509 CA certificate used to issue cluster-scoped certificatesClusterSigningKeyFile [Required]stringclusterSigningCertFile is the filename containing a PEM-encoded RSA or ECDSA private key used to issue cluster-scoped certificatesKubeletServingSignerConfiguration [Required]CSRSigningConfigurationkubeletServingSignerConfiguration holds the certificate and key used to issue certificates for the kubernetes.io/kubelet-serving signerKubeletClientSignerConfiguration [Required]CSRSigningConfigurationkubeletClientSignerConfiguration holds the certificate and key used to issue certificates for the kubernetes.io/kube-apiserver-client-kubeletKubeAPIServerClientSignerConfiguration [Required]CSRSigningConfigurationkubeAPIServerClientSignerConfiguration holds the certificate and key used to issue certificates for the kubernetes.io/kube-apiserver-clientLegacyUnknownSignerConfiguration [Required]CSRSigningConfigurationlegacyUnknownSignerConfiguration holds the certificate and key used to issue certificates for the kubernetes.io/legacy-unknownClusterSigningDuration [Required]meta/v1.DurationclusterSigningDuration is the max length of duration signed certificates will be given. Individual CSRs may request shorter certs by setting spec.expirationSeconds.CronJobControllerConfigurationAppears in:KubeControllerManagerConfigurationCronJobControllerConfiguration contains elements describing CrongJob2Controller.FieldDescriptionConcurrentCronJobSyncs [Required]int32concurrentCronJobSyncs is the number of job objects that are allowed to sync concurrently. Larger number = more responsive jobs, but more CPU (and network) load.DaemonSetControllerConfigurationAppears in:KubeControllerManagerConfigurationDaemonSetControllerConfiguration contains elements describing DaemonSetController.FieldDescriptionConcurrentDaemonSetSyncs [Required]int32concurrentDaemonSetSyncs is the number of daemonset objects that are allowed to sync concurrently. Larger number = more responsive daemonset, but more CPU (and network) load.DeploymentControllerConfigurationAppears in:KubeControllerManagerConfigurationDeploymentControllerConfiguration contains elements describing DeploymentController.FieldDescriptionConcurrentDeploymentSyncs [Required]int32concurrentDeploymentSyncs is the number of deployment objects that are allowed to sync concurrently. Larger number = more responsive deployments, but more CPU (and network) load.DeprecatedControllerConfigurationAppears in:KubeControllerManagerConfigurationDeprecatedControllerConfiguration contains elements be deprecated.EndpointControllerConfigurationAppears in:KubeControllerManagerConfigurationEndpointControllerConfiguration contains elements describing EndpointController.FieldDescriptionConcurrentEndpointSyncs [Required]int32concurrentEndpointSyncs is the number of endpoint syncing operations that will be done concurrently. Larger number = faster endpoint updating, but more CPU (and network) load.EndpointUpdatesBatchPeriod [Required]meta/v1.DurationEndpointUpdatesBatchPeriod describes the length of endpoint updates batching period. Processing of pod changes will be delayed by this duration to join them with potential upcoming updates and reduce the overall number of endpoints updates.EndpointSliceControllerConfigurationAppears in:KubeControllerManagerConfigurationEndpointSliceControllerConfiguration contains elements describing EndpointSliceController.FieldDescriptionConcurrentServiceEndpointSyncs [Required]int32concurrentServiceEndpointSyncs is the number of service endpoint syncing operations that will be done concurrently. Larger number = faster endpoint slice updating, but more CPU (and network) load.MaxEndpointsPerSlice [Required]int32maxEndpointsPerSlice is the maximum number of endpoints that will be added to an EndpointSlice. More endpoints per slice will result in fewer and larger endpoint slices, but larger resources.EndpointUpdatesBatchPeriod [Required]meta/v1.DurationEndpointUpdatesBatchPeriod describes the length of endpoint updates batching period. Processing of pod changes will be delayed by this duration to join them with potential upcoming updates and reduce the overall number of endpoints updates.EndpointSliceMirroringControllerConfigurationAppears in:KubeControllerManagerConfigurationEndpointSliceMirroringControllerConfiguration contains elements describing EndpointSliceMirroringController.FieldDescriptionMirroringConcurrentServiceEndpointSyncs [Required]int32mirroringConcurrentServiceEndpointSyncs is the number of service endpoint syncing operations that will be done concurrently. Larger number = faster endpoint slice updating, but more CPU (and network) load.MirroringMaxEndpointsPerSubset [Required]int32mirroringMaxEndpointsPerSubset is the maximum number of endpoints that will be mirrored to an EndpointSlice for an EndpointSubset.MirroringEndpointUpdatesBatchPeriod [Required]meta/v1.DurationmirroringEndpointUpdatesBatchPeriod can be used to batch EndpointSlice updates. All updates triggered by EndpointSlice changes will be delayed by up to 'mirroringEndpointUpdatesBatchPeriod'. If other addresses in the same Endpoints resource change in that period, they will be batched to a single EndpointSlice update. Default 0 value means that each Endpoints update triggers an EndpointSlice update.EphemeralVolumeControllerConfigurationAppears in:KubeControllerManagerConfigurationEphemeralVolumeControllerConfiguration contains elements describing EphemeralVolumeController.FieldDescriptionConcurrentEphemeralVolumeSyncs [Required]int32ConcurrentEphemeralVolumeSyncseSyncs is the number of ephemeral volume syncing operations that will be done concurrently. Larger number = faster ephemeral volume updating, but more CPU (and network) load.GarbageCollectorControllerConfigurationAppears in:KubeControllerManagerConfigurationGarbageCollectorControllerConfiguration contains elements describing GarbageCollectorController.FieldDescriptionEnableGarbageCollector [Required]boolenables the generic garbage collector. MUST be synced with the corresponding flag of the kube-apiserver. WARNING: the generic garbage collector is an alpha feature.ConcurrentGCSyncs [Required]int32concurrentGCSyncs is the number of garbage collector workers that are allowed to sync concurrently.GCIgnoredResources [Required][]GroupResourcegcIgnoredResources is the list of GroupResources that garbage collection should ignore.GroupResourceAppears in:GarbageCollectorControllerConfigurationGroupResource describes an group resource.FieldDescriptionGroup [Required]stringgroup is the group portion of the GroupResource.Resource [Required]stringresource is the resource portion of the GroupResource.HPAControllerConfigurationAppears in:KubeControllerManagerConfigurationHPAControllerConfiguration contains elements describing HPAController.FieldDescriptionConcurrentHorizontalPodAutoscalerSyncs [Required]int32ConcurrentHorizontalPodAutoscalerSyncs is the number of HPA objects that are allowed to sync concurrently. Larger number = more responsive HPA processing, but more CPU (and network) load.HorizontalPodAutoscalerSyncPeriod [Required]meta/v1.DurationHorizontalPodAutoscalerSyncPeriod is the period for syncing the number of pods in horizontal pod autoscaler.HorizontalPodAutoscalerDownscaleStabilizationWindow [Required]meta/v1.DurationHorizontalPodAutoscalerDowncaleStabilizationWindow is a period for which autoscaler will look backwards and not scale down below any recommendation it made during that period.HorizontalPodAutoscalerTolerance [Required]float64HorizontalPodAutoscalerTolerance is the tolerance for when resource usage suggests upscaling/downscalingHorizontalPodAutoscalerCPUInitializationPeriod [Required]meta/v1.DurationHorizontalPodAutoscalerCPUInitializationPeriod is the period after pod start when CPU samples might be skipped.HorizontalPodAutoscalerInitialReadinessDelay [Required]meta/v1.DurationHorizontalPodAutoscalerInitialReadinessDelay is period after pod start during which readiness changes are treated as readiness being set for the first time. The only effect of this is that HPA will disregard CPU samples from unready pods that had last readiness change during that period.JobControllerConfigurationAppears in:KubeControllerManagerConfigurationJobControllerConfiguration contains elements describing JobController.FieldDescriptionConcurrentJobSyncs [Required]int32concurrentJobSyncs is the number of job objects that are allowed to sync concurrently. Larger number = more responsive jobs, but more CPU (and network) load.LegacySATokenCleanerConfigurationAppears in:KubeControllerManagerConfigurationLegacySATokenCleanerConfiguration contains elements describing LegacySATokenCleanerFieldDescriptionCleanUpPeriod [Required]meta/v1.DurationCleanUpPeriod is the period of time since the last usage of an auto-generated service account token before it can be deleted.NamespaceControllerConfigurationAppears in:KubeControllerManagerConfigurationNamespaceControllerConfiguration contains elements describing NamespaceController.FieldDescriptionNamespaceSyncPeriod [Required]meta/v1.DurationnamespaceSyncPeriod is the period for syncing namespace life-cycle updates.ConcurrentNamespaceSyncs [Required]int32concurrentNamespaceSyncs is the number of namespace objects that are allowed to sync concurrently.NodeIPAMControllerConfigurationAppears in:KubeControllerManagerConfigurationNodeIPAMControllerConfiguration contains elements describing NodeIpamController.FieldDescriptionServiceCIDR [Required]stringserviceCIDR is CIDR Range for Services in cluster.SecondaryServiceCIDR [Required]stringsecondaryServiceCIDR is CIDR Range for Services in cluster. This is used in dual stack clusters. SecondaryServiceCIDR must be of different IP family than ServiceCIDRNodeCIDRMaskSize [Required]int32NodeCIDRMaskSize is the mask size for node cidr in cluster.NodeCIDRMaskSizeIPv4 [Required]int32NodeCIDRMaskSizeIPv4 is the mask size for node cidr in dual-stack cluster.NodeCIDRMaskSizeIPv6 [Required]int32NodeCIDRMaskSizeIPv6 is the mask size for node cidr in dual-stack cluster.NodeLifecycleControllerConfigurationAppears in:KubeControllerManagerConfigurationNodeLifecycleControllerConfiguration contains elements describing NodeLifecycleController.FieldDescriptionNodeEvictionRate [Required]float32nodeEvictionRate is the number of nodes per second on which pods are deleted in case of node failure when a zone is healthySecondaryNodeEvictionRate [Required]float32secondaryNodeEvictionRate is the number of nodes per second on which pods are deleted in case of node failure when a zone is unhealthyNodeStartupGracePeriod [Required]meta/v1.DurationnodeStartupGracePeriod is the amount of time which we allow starting a node to be unresponsive before marking it unhealthy.NodeMonitorGracePeriod [Required]meta/v1.DurationnodeMontiorGracePeriod is the amount of time which we allow a running node to be unresponsive before marking it unhealthy. Must be N times more than kubelet's nodeStatusUpdateFrequency, where N means number of retries allowed for kubelet to post node status. This value should also be greater than the sum of HTTP2_PING_TIMEOUT_SECONDS and HTTP2_READ_IDLE_TIMEOUT_SECONDS.PodEvictionTimeout [Required]meta/v1.DurationpodEvictionTimeout is the grace period for deleting pods on failed nodes.LargeClusterSizeThreshold [Required]int32secondaryNodeEvictionRate is implicitly overridden to 0 for clusters smaller than or equal to largeClusterSizeThresholdUnhealthyZoneThreshold [Required]float32Zone is treated as unhealthy in nodeEvictionRate and secondaryNodeEvictionRate when at least unhealthyZoneThreshold (no less than 3) of Nodes in the zone are NotReadyPersistentVolumeBinderControllerConfigurationAppears in:KubeControllerManagerConfigurationPersistentVolumeBinderControllerConfiguration contains elements describing PersistentVolumeBinderController.FieldDescriptionPVClaimBinderSyncPeriod [Required]meta/v1.DurationpvClaimBinderSyncPeriod is the period for syncing persistent volumes and persistent volume claims.VolumeConfiguration [Required]VolumeConfigurationvolumeConfiguration holds configuration for volume related features.PersistentVolumeRecyclerConfigurationAppears in:VolumeConfigurationPersistentVolumeRecyclerConfiguration contains elements describing persistent volume plugins.FieldDescriptionMaximumRetry [Required]int32maximumRetry is number of retries the PV recycler will execute on failure to recycle PV.MinimumTimeoutNFS [Required]int32minimumTimeoutNFS is the minimum ActiveDeadlineSeconds to use for an NFS Recycler pod.PodTemplateFilePathNFS [Required]stringpodTemplateFilePathNFS is the file path to a pod definition used as a template for NFS persistent volume recyclingIncrementTimeoutNFS [Required]int32incrementTimeoutNFS is the increment of time added per Gi to ActiveDeadlineSeconds for an NFS scrubber pod.PodTemplateFilePathHostPath [Required]stringpodTemplateFilePathHostPath is the file path to a pod definition used as a template for HostPath persistent volume recycling. This is for development and testing only and will not work in a multi-node cluster.MinimumTimeoutHostPath [Required]int32minimumTimeoutHostPath is the minimum ActiveDeadlineSeconds to use for a HostPath Recycler pod. This is for development and testing only and will not work in a multi-node cluster.IncrementTimeoutHostPath [Required]int32incrementTimeoutHostPath is the increment of time added per Gi to ActiveDeadlineSeconds for a HostPath scrubber pod. This is for development and testing only and will not work in a multi-node cluster.PodGCControllerConfigurationAppears in:KubeControllerManagerConfigurationPodGCControllerConfiguration contains elements describing PodGCController.FieldDescriptionTerminatedPodGCThreshold [Required]int32terminatedPodGCThreshold is the number of terminated pods that can exist before the terminated pod garbage collector starts deleting terminated pods. If <= 0, the terminated pod garbage collector is disabled.ReplicaSetControllerConfigurationAppears in:KubeControllerManagerConfigurationReplicaSetControllerConfiguration contains elements describing ReplicaSetController.FieldDescriptionConcurrentRSSyncs [Required]int32concurrentRSSyncs is the number of replica sets that are allowed to sync concurrently. Larger number = more responsive replica management, but more CPU (and network) load.ReplicationControllerConfigurationAppears in:KubeControllerManagerConfigurationReplicationControllerConfiguration contains elements describing ReplicationController.FieldDescriptionConcurrentRCSyncs [Required]int32concurrentRCSyncs is the number of replication controllers that are allowed to sync concurrently. Larger number = more responsive replica management, but more CPU (and network) load.ResourceQuotaControllerConfigurationAppears in:KubeControllerManagerConfigurationResourceQuotaControllerConfiguration contains elements describing ResourceQuotaController.FieldDescriptionResourceQuotaSyncPeriod [Required]meta/v1.DurationresourceQuotaSyncPeriod is the period for syncing quota usage status in the system.ConcurrentResourceQuotaSyncs [Required]int32concurrentResourceQuotaSyncs is the number of resource quotas that are allowed to sync concurrently. Larger number = more responsive quota management, but more CPU (and network) load.SAControllerConfigurationAppears in:KubeControllerManagerConfigurationSAControllerConfiguration contains elements describing ServiceAccountController.FieldDescriptionServiceAccountKeyFile [Required]stringserviceAccountKeyFile is the filename containing a PEM-encoded private RSA key used to sign service account tokens.ConcurrentSATokenSyncs [Required]int32concurrentSATokenSyncs is the number of service account token syncing operations that will be done concurrently.RootCAFile [Required]stringrootCAFile is the root certificate authority will be included in service account's token secret. This must be a valid PEM-encoded CA bundle.StatefulSetControllerConfigurationAppears in:KubeControllerManagerConfigurationStatefulSetControllerConfiguration contains elements describing StatefulSetController.FieldDescriptionConcurrentStatefulSetSyncs [Required]int32concurrentStatefulSetSyncs is the number of statefulset objects that are allowed to sync concurrently. Larger number = more responsive statefulsets, but more CPU (and network) load.TTLAfterFinishedControllerConfigurationAppears in:KubeControllerManagerConfigurationTTLAfterFinishedControllerConfiguration contains elements describing TTLAfterFinishedController.FieldDescriptionConcurrentTTLSyncs [Required]int32concurrentTTLSyncs is the number of TTL-after-finished collector workers that are allowed to sync concurrently.ValidatingAdmissionPolicyStatusControllerConfigurationAppears in:KubeControllerManagerConfigurationValidatingAdmissionPolicyStatusControllerConfiguration contains elements describing ValidatingAdmissionPolicyStatusController.FieldDescriptionConcurrentPolicySyncs [Required]int32ConcurrentPolicySyncs is the number of policy objects that are allowed to sync concurrently. Larger number = quicker type checking, but more CPU (and network) load. The default value is 5.VolumeConfigurationAppears in:PersistentVolumeBinderControllerConfigurationVolumeConfiguration contains all enumerated flags meant to configure all volume plugins. From this config, the controller-manager binary will create many instances of volume.VolumeConfig, each containing only the configuration needed for that plugin which are then passed to the appropriate plugin. The ControllerManager binary is the only part of the code which knows what plugins are supported and which flags correspond to each plugin.FieldDescriptionEnableHostPathProvisioning [Required]boolenableHostPathProvisioning enables HostPath PV provisioning when running without a cloud provider. This allows testing and development of provisioning features. HostPath provisioning is not supported in any way, won't work in a multi-node cluster, and should not be used for anything other than testing or development.EnableDynamicProvisioning [Required]boolenableDynamicProvisioning enables the provisioning of volumes when running within an environment that supports dynamic provisioning. Defaults to true.PersistentVolumeRecyclerConfiguration [Required]PersistentVolumeRecyclerConfigurationpersistentVolumeRecyclerConfiguration holds configuration for persistent volume plugins.FlexVolumePluginDir [Required]stringvolumePluginDir is the full path of the directory in which the flex volume plugin should search for additional third party volume pluginsThis page is automatically generated.If you plan to report an issue with this page, mention that the page is auto-generated in your issue description. The fix may need to happen elsewhere in the Kubernetes project.