Documentación
Kubernetes Blog
Partners
Comunidad
Casos de éxito
Versions
Release Information
v1.24
v1.23
v1.22
v1.21
v1.20
Español (Spanish)
English
中文 (Chinese)
한국어 (Korean)
日本語 (Japanese)
Français (French)
Português (Portuguese)
Bahasa Indonesia
Home
Setup
Descargando Kubernetes
Compilando desde código fuente
Learning environment
Desplegando un clúster con kubeadm
Production environment
Container Runtimes
Installing Kubernetes with deployment tools
Bootstrapping clusters with kubeadm
Installing kubeadm
Troubleshooting kubeadm
Creating a cluster with kubeadm
Customizing components with the kubeadm API
Options for Highly Available Topology
Creating Highly Available Clusters with kubeadm
Set up a High Availability etcd Cluster with kubeadm
Configuring each kubelet in your cluster using kubeadm
Dual-stack support with kubeadm
Installing Kubernetes with kops
Installing Kubernetes with Kubespray
Turnkey Cloud Solutions
Best practices
Considerations for large clusters
Running in multiple zones
Validate node setup
Enforcing Pod Security Standards
PKI certificates and requirements
Soluciones sobre IaaS en la nube
Soluciones sobre virtualización On-Premises
Soluciones personalizadas
Kubernetes sobre Windows
Conceptos
Introducción
¿Qué es Kubernetes?
Componentes de Kubernetes
API de Kubernetes
Objetos de Kubernetes
Entender los Objetos de Kubernetes
Kubernetes Object Management
Nombres
Espacios de nombres
Etiquetas y Selectores
Anotaciones
Finalizers
Owners and Dependents
Selectores de Campo
Etiquetas recomendadas
Gestión de objetos usando kubectl
Arquitectura de Kubernetes
Nodos
Communication between Nodes and the Control Plane
(EN)
Comunicación Nodo-Maestro
Conceptos subyacentes del Cloud Controller Manager
Controllers
(EN)
Container Runtime Interface (CRI)
(EN)
Garbage Collection
(EN)
Contenedores
Images
Container Environment
RuntimeClass
Variables de entorno de un Container
Container Lifecycle Hooks
Cargas de trabajo
Pods
Pods
Pod Lifecycle
Contenedores de Inicialización
Pod Preset
Interrupciones
Containers Efímeros
Downward API
Controladores
ReplicaSet
ReplicationController
Deployment
StatefulSets
DaemonSet
Jobs
Recolección de Basura
Controlador TTL para Recursos Finalizados
Jobs - Ejecución hasta el final
CronJob
Windows in Kubernetes
(EN)
Servicios, balanceo de carga y redes
Topology-aware traffic routing with topology keys
DNS for Services and Pods
Service
Connecting Applications with Services
Ingress
Ingress Controllers
EndpointSlices
Service Internal Traffic Policy
Topology Aware Hints
Políticas de red (Network Policies)
IPv4/IPv6 dual-stack
Networking on Windows
Almacenamiento
Volumes
Persistent Volumes
Snapshots de Volúmenes
Projected Volumes
Clonación de volumen CSI
Ephemeral Volumes
Storage Classes
Volume Snapshot Classes
Aprovisionamiento Dinámico de volumen
Capacidad de Almacenamiento
Límites de Volumen específicos del Nodo
Supervisión del Estado del Volumen
Windows Storage
Configuración
Configuration Best Practices
ConfigMaps
Sobrecarga de Pod
Administrando los recursos de los contenedores
Secrets
Organizar el acceso a los clústeres utilizando archivos kubeconfig
Resource Management for Windows nodes
Seguridad
Pod Security Standards
Vista General de Seguridad Cloud Native
Pod Security Admission
Pod Security Policies
Security For Windows Nodes
Role Based Access Control Good Practices
Multi-tenancy
Controlando el Acceso a la API de Kubernetes
Políticas
Rangos de límites (Limit Ranges)
Resource Quotas
Process ID Limits And Reservations
Node Resource Managers
Scheduling, Preemption and Eviction
(EN)
Administración del Clúster
Extendiendo Kubernetes
Extendiendo la API de Kubernetes
Extensiones de computación, almacenamiento y redes
Operator pattern
Guías de iniciación
Fedora
Tareas
Instalar herramientas
Administrar un clúster
Administrar un clúster con kubeadm
Migrating from dockershim
Changing the Container Runtime on a Node from Docker Engine to containerd
Migrate Docker Engine nodes from dockershim to cri-dockerd
Find Out What Container Runtime is Used on a Node
Troubleshooting CNI plugin-related errors
Check whether dockershim removal affects you
Migrating telemetry and security agents from dockershim
Administrar recursos de memoria, CPU y API
Generate Certificates Manually
Instalar un proveedor de políticas de red
Access Clusters Using the Kubernetes API
Advertise Extended Resources for a Node
Autoscale the DNS Service in a Cluster
Change the default StorageClass
Change the Reclaim Policy of a PersistentVolume
Cloud Controller Manager Administration
Configure Quotas for API Objects
Control CPU Management Policies on the Node
Control Topology Management Policies on a node
Customizing DNS Service
Debugging DNS Resolution
Declare Network Policy
Developing Cloud Controller Manager
Enable Or Disable A Kubernetes API
Enabling Service Topology
Encrypting Secret Data at Rest
Guaranteed Scheduling For Critical Add-On Pods
IP Masquerade Agent User Guide
Limit Storage Consumption
Migrate Replicated Control Plane To Use Cloud Controller Manager
Namespaces Walkthrough
Operating etcd clusters for Kubernetes
Reconfigure a Node's Kubelet in a Live Cluster
Reserve Compute Resources for System Daemons
Running Kubernetes Node Components as a Non-root User
Safely Drain a Node
Securing a Cluster
Set Kubelet parameters via a config file
Share a Cluster with Namespaces
Upgrade A Cluster
Use Cascading Deletion in a Cluster
Using a KMS provider for data encryption
Using CoreDNS for Service Discovery
Using NodeLocal DNSCache in Kubernetes Clusters
Using sysctls in a Kubernetes Cluster
Utilizing the NUMA-aware Memory Manager
Verify Signed Container Images
Configurar pods y contenedores
Assign Memory Resources to Containers and Pods
Assign CPU Resources to Containers and Pods
Configure GMSA for Windows Pods and containers
Configure RunAsUserName for Windows pods and containers
Create a Windows HostProcess Pod
Configure Quality of Service for Pods
Assign Extended Resources to a Container
Configura un Pod para Usar un Volume como Almacenamiento
Configure a Pod to Use a PersistentVolume for Storage
Configure a Pod to Use a Projected Volume for Storage
Configure a Security Context for a Pod or Container
Configure Service Accounts for Pods
Pull an Image from a Private Registry
Configure Liveness, Readiness and Startup Probes
Assign Pods to Nodes
Assign Pods to Nodes using Node Affinity
Configure Pod Initialization
Attach Handlers to Container Lifecycle Events
Configure a Pod to Use a ConfigMap
Share Process Namespace between Containers in a Pod
Create static Pods
Translate a Docker Compose File to Kubernetes Resources
Enforce Pod Security Standards by Configuring the Built-in Admission Controller
Enforce Pod Security Standards with Namespace Labels
Migrate from PodSecurityPolicy to the Built-In PodSecurity Admission Controller
Monitoring, Logging, and Debugging
Troubleshooting Applications
Debug Pods
Debug Services
Debug a StatefulSet
Debug Init Containers
Debug Running Pods
Determine the Reason for Pod Failure
Get a Shell to a Running Container
Troubleshooting Clusters
Resource metrics pipeline
Tools for Monitoring Resources
Monitor Node Health
Debugging Kubernetes nodes with crictl
Auditing
Developing and debugging services locally using telepresence
Windows debugging tips
Administrar Objetos en Kubernetes
Administración declarativa de Objetos en Kubernetes usando archivos de Configuración
Declarative Management of Kubernetes Objects Using Kustomize
Managing Kubernetes Objects Using Imperative Commands
Imperative Management of Kubernetes Objects Using Configuration Files
Update API Objects in Place Using kubectl patch
Managing Secrets
Managing Secrets using kubectl
Managing Secrets using Configuration File
Managing Secrets using Kustomize
Inyectar datos en las aplicaciones
Gestionar y ejecutar aplicaciones
Corre una aplicación stateless usando un Deployment
Run a Single-Instance Stateful Application
Run a Replicated Stateful Application
Scale a StatefulSet
Delete a StatefulSet
Force Delete StatefulSet Pods
Horizontal Pod Autoscaling
HorizontalPodAutoscaler Walkthrough
Especificando un presupuesto de disrupción para tu aplicación
Accessing the Kubernetes API from a Pod
Gestionar y ejecutar daemons
Gestionar y ejecutar trabajos
Acceder al clúster y las aplicaciones
Monitorización, Logs y Debugging
Auditoría
Depurar Contenedores de Inicialización
Escribiendo Logs con Elasticsearch y Kibana
Pipeline de métricas de recursos
Extend Kubernetes
Configure the Aggregation Layer
Use Custom Resources
Extend the Kubernetes API with CustomResourceDefinitions
Versions in CustomResourceDefinitions
Set up an Extension API Server
Configure Multiple Schedulers
Use an HTTP Proxy to Access the Kubernetes API
Use a SOCKS5 Proxy to Access the Kubernetes API
Set up Konnectivity service
Extender la API de Kubernetes
Usar recursos personalizados
Gestionar certificados TLS
Federación
Administrar la federación de clústeres
Catálogo de servicios
Networking
Adding entries to Pod /etc/hosts with HostAliases
Validate IPv4/IPv6 dual-stack
Configure a kubelet image credential provider
Extend kubectl with plugins
Manage HugePages
Schedule GPUs
Tutoriales
Hello Minikube
Introducción
Crear un clúster
Using Minikube to Create a Cluster
Tutorial interactivo - Crear un clúster
Desplegar una aplicación
Using kubectl to Create a Deployment
Tutorial interactivo - Implementando una aplicación
Consultar el estado de una aplicación
Exponer una aplicación
Escalar una aplicación
Actualizar una aplicación
Formación en línea
Configuración
Aplicaciones Stateless
Security
Apply Pod Security Standards at the Cluster Level
Apply Pod Security Standards at the Namespace Level
Restrict a Container's Access to Resources with AppArmor
Restrict a Container's Syscalls with seccomp
Aplicaciones Stateful
Clústeres
Servicios
Referencia
Glosario de términos
kubectl CLI
Kubernetes API
Workload Resources
Pod
PodTemplate
ReplicationController
ReplicaSet
Deployment
StatefulSet
ControllerRevision
DaemonSet
Job
CronJob
HorizontalPodAutoscaler
HorizontalPodAutoscaler
HorizontalPodAutoscaler v2beta2
PriorityClass
Service Resources
Service
Endpoints
EndpointSlice
Ingress
IngressClass
Config and Storage Resources
ConfigMap
Secret
Volume
PersistentVolumeClaim
PersistentVolume
StorageClass
VolumeAttachment
CSIDriver
CSINode
CSIStorageCapacity
Authentication Resources
ServiceAccount
TokenRequest
TokenReview
CertificateSigningRequest
Authorization Resources
LocalSubjectAccessReview
SelfSubjectAccessReview
SelfSubjectRulesReview
SubjectAccessReview
ClusterRole
ClusterRoleBinding
Role
RoleBinding
Policy Resources
LimitRange
ResourceQuota
NetworkPolicy
PodDisruptionBudget
PodSecurityPolicy v1beta1
Extend Resources
CustomResourceDefinition
MutatingWebhookConfiguration
ValidatingWebhookConfiguration
Cluster Resources
Node
Namespace
Event
APIService
Lease
RuntimeClass
FlowSchema v1beta2
PriorityLevelConfiguration v1beta2
Binding
ComponentStatus
Common Definitions
DeleteOptions
LabelSelector
ListMeta
LocalObjectReference
NodeSelectorRequirement
ObjectFieldSelector
ObjectMeta
ObjectReference
Patch
Quantity
ResourceFieldSelector
Status
TypedLocalObjectReference
Common Parameters
v1.14
Utilizando la API de Kubernetes
Well-Known Labels, Annotations and Taints
Audit Annotations
Accediendo a la API de Kubernetes
Reportando problemas en Kubernetes
Node Reference Information
Articles on dockershim Removal and on Using CRI-compatible Runtimes
Herramientas de configuración
kubeadm
kubefed
Ports and Protocols
Herramientas de línea de comandos
Configuration APIs
Client Authentication (v1)
Client Authentication (v1beta1)
Event Rate Limit Configuration (v1alpha1)
Image Policy API (v1alpha1)
kube-apiserver Audit Configuration (v1)
kube-apiserver Configuration (v1)
kube-apiserver Configuration (v1alpha1)
kube-apiserver Encryption Configuration (v1)
kube-proxy Configuration (v1alpha1)
kube-scheduler Configuration (v1beta2)
kube-scheduler Configuration (v1beta3)
kubeadm Configuration (v1beta2)
kubeadm Configuration (v1beta3)
Kubelet Configuration (v1alpha1)
Kubelet Configuration (v1beta1)
Kubelet CredentialProvider (v1alpha1)
Kubelet CredentialProvider (v1beta1)
WebhookAdmission Configuration (v1)
Federation API
Scheduling
Scheduler Configuration
Scheduling Policies
Other Tools
Mapping from dockercli to crictl
Contribuir
Empieza a contribuir
Suggesting content improvements
Contributing new content
Opening a pull request
Documenting for a release
Blogs and case studies
Reviewing changes
Reviewing pull requests
For approvers and reviewers
Localizing Kubernetes documentation
Participating in SIG Docs
Roles and responsibilities
PR wranglers
Cómo escribir documentación
Documentación de referencia
Advanced contributing
Viewing Site Analytics
Contribuir a la documentación de Kubernetes en español
Docs smoke test page
(EN)
Resultados de la búsqueda
Documentación
Conceptos
Seguridad
Seguridad
Vista General de Seguridad Cloud Native
Controlando el Acceso a la API de Kubernetes
Última modificación March 26, 2021 at 11:59 AM PST:
feat: content/es/docs/concepts/security/overview (e9783b0cb4)
Editar esta página
Create child page
Notificar una incidencia con la documentanción
Imprimir la sección entera