1KUBERNETES(1)                      Jan 2015                      KUBERNETES(1)
2
3
4

NAME

6       kubectl taint - Update the taints on one or more nodes
7
8
9

SYNOPSIS

11       kubectl taint [OPTIONS]
12
13
14

DESCRIPTION

16       Update the taints on one or more nodes.
17
18       0
19
20              item  A  taint consists of a key, value, and effect. As an argu‐
21              ment here, it is expressed as key=value:effect.
22              item The key must begin with a letter or number, and may contain
23              letters,  numbers,  hyphens,  dots,  and underscores, up to  253
24              characters.
25              item Optionally, the key can begin with a DNS  subdomain  prefix
26              and a single '/', like example.com/my-app
27              item  The value must begin with a letter or number, and may con‐
28              tain letters, numbers, hyphens, dots, and underscores, up to  63
29              characters.
30              item  The  effect must be NoSchedule, PreferNoSchedule or NoExe‐
31              cute.
32              item Currently taint can only apply to node.
33
34

OPTIONS

36       --all=false
37           Select all nodes in the cluster
38
39
40       --allow-missing-template-keys=true
41           If true, ignore any errors in templates when a field or map key  is
42       missing  in  the  template.  Only applies to golang and jsonpath output
43       formats.
44
45
46       -o, --output=""
47           Output format. One of: json|yaml|name|templatefile|template|go-tem‐
48       plate|go-template-file|jsonpath|jsonpath-file.
49
50
51       --overwrite=false
52           If  true,  allow  taints  to be overwritten, otherwise reject taint
53       updates that overwrite existing taints.
54
55
56       -l, --selector=""
57           Selector (label query)  to  filter  on,  supports  '=',  '==',  and
58       '!='.(e.g. -l key1=value1,key2=value2)
59
60
61       --template=""
62           Template  string  or  path  to template file to use when -o=go-tem‐
63       plate, -o=go-template-file. The template format is golang  templates  [
64http://golang.org/pkg/text/template/#pkg-overview⟩].
65
66
67       --validate=true
68           If true, use a schema to validate the input before sending it
69
70
71

OPTIONS INHERITED FROM PARENT COMMANDS

73       --allow-verification-with-non-compliant-keys=false
74           Allow  a  SignatureVerifier  to  use  keys  which  are  technically
75       non-compliant with RFC6962.
76
77
78       --alsologtostderr=false
79           log to standard error as well as files
80
81
82       --application-metrics-count-limit=100
83           Max number of application metrics to store (per container)
84
85
86       --as=""
87           Username to impersonate for the operation
88
89
90       --as-group=[]
91           Group to impersonate for the operation, this flag can  be  repeated
92       to specify multiple groups.
93
94
95       --azure-container-registry-config=""
96           Path  to the file containing Azure container registry configuration
97       information.
98
99
100       --boot-id-file="/proc/sys/kernel/random/boot_id"
101           Comma-separated list of files to check for boot-id. Use  the  first
102       one that exists.
103
104
105       --cache-dir="/builddir/.kube/http-cache"
106           Default HTTP cache directory
107
108
109       --certificate-authority=""
110           Path to a cert file for the certificate authority
111
112
113       --client-certificate=""
114           Path to a client certificate file for TLS
115
116
117       --client-key=""
118           Path to a client key file for TLS
119
120
121       --cloud-provider-gce-lb-src-cidrs=130.211.0.0/22,209.85.152.0/22,209.85.204.0/22,35.191.0.0/16
122           CIDRs opened in GCE firewall for LB traffic proxy  health checks
123
124
125       --cluster=""
126           The name of the kubeconfig cluster to use
127
128
129       --container-hints="/etc/cadvisor/container_hints.json"
130           location of the container hints file
131
132
133       --containerd="unix:///var/run/containerd.sock"
134           containerd endpoint
135
136
137       --context=""
138           The name of the kubeconfig context to use
139
140
141       --default-not-ready-toleration-seconds=300
142           Indicates   the   tolerationSeconds   of   the    toleration    for
143       notReady:NoExecute  that is added by default to every pod that does not
144       already have such a toleration.
145
146
147       --default-unreachable-toleration-seconds=300
148           Indicates the tolerationSeconds  of  the  toleration  for  unreach‐
149       able:NoExecute  that  is  added  by  default to every pod that does not
150       already have such a toleration.
151
152
153       --docker="unix:///var/run/docker.sock"
154           docker endpoint
155
156
157       --docker-env-metadata-whitelist=""
158           a comma-separated list of environment variable keys that  needs  to
159       be collected for docker containers
160
161
162       --docker-only=false
163           Only report docker containers in addition to root stats
164
165
166       --docker-root="/var/lib/docker"
167           DEPRECATED:  docker  root is read from docker info (this is a fall‐
168       back, default: /var/lib/docker)
169
170
171       --docker-tls=false
172           use TLS to connect to docker
173
174
175       --docker-tls-ca="ca.pem"
176           path to trusted CA
177
178
179       --docker-tls-cert="cert.pem"
180           path to client certificate
181
182
183       --docker-tls-key="key.pem"
184           path to private key
185
186
187       --enable-load-reader=false
188           Whether to enable cpu load reader
189
190
191       --event-storage-age-limit="default=0"
192           Max length of time for which to store events (per type). Value is a
193       comma  separated  list  of  key  values, where the keys are event types
194       (e.g.: creation, oom) or "default" and the value is a duration. Default
195       is applied to all non-specified event types
196
197
198       --event-storage-event-limit="default=0"
199           Max  number  of  events to store (per type). Value is a comma sepa‐
200       rated list of key values, where the keys are event  types  (e.g.:  cre‐
201       ation,  oom)  or  "default"  and  the  value  is an integer. Default is
202       applied to all non-specified event types
203
204
205       --global-housekeeping-interval=1m0s
206           Interval between global housekeepings
207
208
209       --google-json-key=""
210           The Google Cloud Platform Service  Account  JSON  Key  to  use  for
211       authentication.
212
213
214       --housekeeping-interval=10s
215           Interval between container housekeepings
216
217
218       --insecure-skip-tls-verify=false
219           If true, the server's certificate will not be checked for validity.
220       This will make your HTTPS connections insecure
221
222
223       --kubeconfig=""
224           Path to the kubeconfig file to use for CLI requests.
225
226
227       --log-backtrace-at=:0
228           when logging hits line file:N, emit a stack trace
229
230
231       --log-cadvisor-usage=false
232           Whether to log the usage of the cAdvisor container
233
234
235       --log-dir=""
236           If non-empty, write log files in this directory
237
238
239       --log-flush-frequency=5s
240           Maximum number of seconds between log flushes
241
242
243       --logtostderr=true
244           log to standard error instead of files
245
246
247       --machine-id-file="/etc/machine-id,/var/lib/dbus/machine-id"
248           Comma-separated list of files to  check  for  machine-id.  Use  the
249       first one that exists.
250
251
252       --match-server-version=false
253           Require server version to match client version
254
255
256       --mesos-agent="127.0.0.1:5051"
257           Mesos agent address
258
259
260       --mesos-agent-timeout=10s
261           Mesos agent timeout
262
263
264       -n, --namespace=""
265           If present, the namespace scope for this CLI request
266
267
268       --request-timeout="0"
269           The  length  of  time  to  wait before giving up on a single server
270       request. Non-zero values should contain a corresponding time unit (e.g.
271       1s, 2m, 3h). A value of zero means don't timeout requests.
272
273
274       -s, --server=""
275           The address and port of the Kubernetes API server
276
277
278       --stderrthreshold=2
279           logs at or above this threshold go to stderr
280
281
282       --storage-driver-buffer-duration=1m0s
283           Writes  in  the  storage driver will be buffered for this duration,
284       and committed to the non memory backends as a single transaction
285
286
287       --storage-driver-db="cadvisor"
288           database name
289
290
291       --storage-driver-host="localhost:8086"
292           database host:port
293
294
295       --storage-driver-password="root"
296           database password
297
298
299       --storage-driver-secure=false
300           use secure connection with database
301
302
303       --storage-driver-table="stats"
304           table name
305
306
307       --storage-driver-user="root"
308           database username
309
310
311       --token=""
312           Bearer token for authentication to the API server
313
314
315       --user=""
316           The name of the kubeconfig user to use
317
318
319       -v, --v=0
320           log level for V logs
321
322
323       --version=false
324           Print version information and quit
325
326
327       --vmodule=
328           comma-separated list of pattern=N settings for  file-filtered  log‐
329       ging
330
331
332

EXAMPLE

334                # Update node 'foo' with a taint with key 'dedicated' and value 'special-user' and effect 'NoSchedule'.
335                # If a taint with that key and effect already exists, its value is replaced as specified.
336                kubectl taint nodes foo dedicated=special-user:NoSchedule
337
338                # Remove from node 'foo' the taint with key 'dedicated' and effect 'NoSchedule' if one exists.
339                kubectl taint nodes foo dedicated:NoSchedule-
340
341                # Remove from node 'foo' all the taints with key 'dedicated'
342                kubectl taint nodes foo dedicated-
343
344                # Add a taint with key 'dedicated' on nodes having label mylabel=X
345                kubectl taint node -l myLabel=X  dedicated=foo:PreferNoSchedule
346
347
348
349

SEE ALSO

351       kubectl(1),
352
353
354

HISTORY

356       January  2015,  Originally compiled by Eric Paris (eparis at redhat dot
357       com) based on the kubernetes source material, but hopefully  they  have
358       been automatically generated since!
359
360
361
362Eric Paris                  kubernetes User Manuals              KUBERNETES(1)
Impressum