Exposed APIs, Kubernetes configuration and Feature gates

Last updated May 30th, 2022.

ou can find here some details on the APIs: the one we expose on OVHcloud and the configuration of Kubernetes APIs on OVHcloud Managed Kubernetes clusters.

OVHcloud API

We have added a Kubernetes section to the OVHcloud API.
Using it allows you to add and remove nodes, update and reset your clusters or get kubectl configuration.

If you have never used the OVHcloud API, you can learn the basics in First steps with the OVHcloud API.

Kubernetes configuration

API

Admission plugins (defaults are not listed here):

  • AlwaysPullImages: Forces every new pod to pull the required images each time. In a multi-tenant cluster users can be assured that their private images can only be used by those who have the credentials to pull them.
  • NodeRestriction: Ensure that the kubelet is restricted to the Node and Pod objects that it could modify as defined. Such kubelets will only be allowed to modify their own NodeAPI object and PodAPI objects that are bound to their node.

Authorization modes:

  • Node: Authorise API requests made by Kubelets.
  • RBAC: Role-based access control is a method of regulating access to computer or network resources based on the roles of individual users within an organisation.

Feature gates:

  • TTLAfterFinished: Allow a TTL controller to clean up resources after they finish execution.

Kubelet

  • protect-kernel-defaults: Protect tuned kernel parameters from overriding kubelet default kernel parameter values.

Did you find this guide useful?

Please feel free to give any suggestions in order to improve this documentation.

Whether your feedback is about images, content, or structure, please share it, so that we can improve it together.

Your support requests will not be processed via this form. To do this, please use the "Create a ticket" form.

Thank you. Your feedback has been received.


These guides might also interest you...

OVHcloud Community

Access your community space. Ask questions, search for information, post content, and interact with other OVHcloud Community members.

Discuss with the OVHcloud community